ExamTopics Az-900

- Expert Verified, Online, Free.
Custom View Settings

Topic 1 - Single Topic
Question #1Topic 1
HOTSPOT -
For each of the following statements, select Yes if the statement is true. Otherwise,
select No.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct
Answer:
Box 1: No -
A PaaS solution does not provide access to the operating system. The Azure Web Apps
service provides an environment for you to host your web applications.
Behind the scenes, the web apps are hosted on virtual machines running IIS. However,
you have no direct access to the virtual machine, the operating system or
IIS.
Box 2: Yes -
A PaaS solution that hosts web apps in Azure does provide the ability to scale the
platform automatically. This is known as autoscaling. Behind the scenes, the web apps
are hosted on virtual machines running IIS. Autoscaling means adding more load
balanced virtual machines to host the web apps.
Box 3: Yes -
PaaS provides a framework that developers can build upon to develop or customize
cloud-based applications. PaaS development tools can cut the time it takes to code new
apps with pre-coded application components built into the platform, such as workflow,
directory services, security features, search and so on.
References:
https://azure.microsoft.com/en-gb/overview/what-is-paas/
mudot
Highly Voted 1 year, 5 months ago

1. PasS wont give you full control like IaaS 2. most PaaS offerings has option to scale out 3. it is
referring to azure devops which u can use with PaaS
upvoted 65 times
joondez
9 months ago
Agree, it is NYY
upvoted 11 times
Moon

I think the answers are: No, Yes, No. PaaS does not provide professional services on add features
to the applications! Anything related to the application is the responsibility of the customer in
PaaS.
upvoted 45 times
sbettani
1 year, 5 months ago

In my hopinion this refers to: Advantages of PaaS By delivering infrastructure as a service, PaaS
offers the same advantages as IaaS. But its additional features—middleware, development tools,
and other business tools—give you more advantages: Cut coding time. PaaS development tools
can cut the time it takes to code new apps with pre-coded application components built into the
platform, such as workflow, directory services, security features, search, and so on. Add
development capabilities without adding staff. Platform as a Service components can give your
development team new capabilities without your needing to add staff having the required skills.
Develop for multiple platforms—including mobile—more easily. Some service providers give
you development options for multiple platforms, such as computers, mobile devices, and
browsers making cross-platform apps quicker and easier to develop. Source:
https://azure.microsoft.com/en-us/overview/what-is-paas/
upvoted 9 times
Meo

Regarding the third question, it seems as if is referring to DevOps/GitHub feature of Web App
Service, which provides the functionalty of "continous deployment". As per Microsoft: "Web App
Service not only adds the power of Microsoft Azure to your application, such as security, load
balancing and autoscaling. You can also take advantage of its DevOps capabilities, such as
continuous deployment from Azure DevOps, GitHub, and other sources." Source:
https://docs.microsoft.com/en-us/azure/app-service/overview
upvoted 18 times
anksp
Most Recent 21 hours, 28 minutes ago

exam lab is extreamly good, cleared my az-900 with 820 score. Thank you.
upvoted 1 times
sebastiantf
4 days, 13 hours ago

Additional services. PaaS providers may offer other services that enhance applications, such as
workflow, directory, security and scheduling. https://azure.microsoft.com/en-gb/overview/what-
is-paas/
upvoted 1 times
Gerardo1971
2 weeks, 5 days ago

Correct answer
upvoted 1 times
arshangel
2 weeks, 5 days ago

I took 900+ And now I am an expert in differentiating motorbus , bikes , cycles and trucks thanks
upvoted 5 times
anirban7172
3 days, 5 hours ago

I agree with you
upvoted 1 times
mabotega

hahahahahahahahaha
upvoted 1 times
Shakthi17
1 month ago
How did you surpass after page 28? I am not able to get the questions. It's asking me to pay and
I am not able to. Please help!!
upvoted 1 times
anirban7172
3 days, 5 hours ago

I believe, you need to buy contributor Access. You can also try googling, searching in other
websites which have pretty same questions
upvoted 1 times
Samanouseke
1 month ago
Hey guys, just to let you know that I took the test today (4/13/2021). Pretty much all questions
from here. Pass with 900 score. Just 3 or 4 questions that are not in this list. Good luck to you all.
upvoted 4 times
GuyJosenhans
1 month ago
I received 880 on this test! 4/13/21
upvoted 2 times
anirban7172
3 days, 5 hours ago

Please share any New Questions you remember.
upvoted 1 times
Shakthi17
1 month ago
How did you surpass after page 28? I am not able to get the questions.
upvoted 1 times
Jai2301
2 months ago
Correct answer is NYY
upvoted 1 times
andrelouco
2 months ago
good question
upvoted 1 times
panal
2 months, 3 weeks ago

I think the answer is: N-Y-Y
upvoted 2 times
SheldonHofstadter

3rd one should be Yes https://azure.microsoft.com/en-in/overview/what-is-paas/ Common PaaS
scenarios Organisations typically use PaaS for these scenarios: Development framework. PaaS
provides a framework that developers can build upon to develop or customise cloud-based
applications. Similar to the way you create an Excel macro, PaaS lets developers create
applications using built-in software components. Cloud features such as scalability, high-
availability and multi-tenant capability are included, reducing the amount of coding that
developers must do.
upvoted 2 times
nigeldmgriffith

No, Yes, No ==> PaaS only allows management of applications and services you develop; all
other components is managed by the service provider.
upvoted 1 times
sinear

But "custom features", they meant that the development platform/environment provided by
PaaS offers the possibility to the developers to add features to their apps. So in that regard, the
3rd statement is true. The development environment is provided by the could provider, and it is
its role to keep it up to date, including new options/updates, that the app developer on the
client side can then leverage to build new features.
upvoted 1 times
Tzozo
4 months, 1 week ago

N-Y-N
upvoted 1 times
nrajesh17

PaaS allows you to avoid the expense and complexity of buying and managing software licenses,
the underlying application infrastructure and middleware, container orchestrators such as
Kubernetes or "the development tools" and other resources. https://azure.microsoft.com/en-
in/overview/what-is-paas/ Hence answer to last question is "Yes".
upvoted 2 times
homer_simpson
5 months ago
The correct answer is No, Yes, No
upvoted 2 times
PinguinCoder94
5 months ago
wrong! it's N, Y, Y
upvoted 9 times
Question #2Topic 1
HOTSPOT -
select No.
Hot Area:
Correct
Answer:
Box 1: Yes -
Traditionally, IT expenses have been considered a Capital Expenditure (CapEx). Today,
with the move to the cloud and the pay-as-you-go model, organizations have the ability
to stretch their budgets and are shifting their IT CapEx costs to Operating Expenditures
(OpEx) instead. This flexibility, in accounting terms, is now an option due to the ‫ג‬€as a
Service‫ג‬€ model of purchasing software, cloud storage and other IT related resources.
Box 2: No -
Two virtual machines using the same size could have different disk configurations.
Therefore, the monthly costs could be different.
Box 3: Yes -
When an Azure virtual machine is stopped, you don‫ג‬€™t pay for the virtual machine.
However, you do still pay for the storage costs associated to the virtual machine.
The most common storage costs are for the disks attached to the virtual machines.
There are also other storage costs associated with a virtual machine such as storage for
diagnostic data and virtual machine backups.
References:
https://meritsolutions.com/capex-vs-opex-cloud-computing-blog/
thakur

Correct
upvoted 29 times
Rohanmore5

Correct. Y,N,Y. Storage cost are separate. In Azure stopping VM and de-allocating / deleting VM
is different. If you stop VM still you need storage space to store VM image and which will cost
you. Cost is Azure have different meters so VM costly will be possibly different at end of month.
upvoted 27 times
Gerardo1971
Most Recent 2 weeks, 5 days ago

Correct answer
upvoted 3 times
Eng_moh39
1 month, 1 week ago

this Question in the exam
upvoted 3 times
andrelouco
2 months ago
YES-NO-YES - Sim, Não e SIM (Portuguese)
upvoted 1 times
EmilioDeBaku

For reserved VM's you pay upfront(CAPEX) and for other services Pay-as-you-go (OPex).
upvoted 2 times
panal

Correct
upvoted 1 times
Reece4

Guys - Exam Topics is a reputable site and is accurate. Answer is: YES NO YES (TRUE) Azure
provides flexibility between capital expenditure (CapEx) and operational expenditure (OpEx):
Capital expenditures generate benefits over a long period. ... Operating expenditures are
ongoing costs of doing business. Consuming cloud services in a pay-as-you-go model could
qualify as an operating expenditure.
upvoted 3 times
shaikb2b
5 months ago
For 2nd question - If 2 VMs are deployed at different region and if 2 VMS are using different OS
then answer would be NO. But here they are saying nothing like that. Then how can the answer
be NO.
upvoted 1 times
onifemi
1 month ago
The first thing that comes to mind is that the usage of the VMs aren't the same, so NO is the
very natural answer
upvoted 2 times
Buruguduystunstugudunstuy

Answer: Yes, No, Yes
upvoted 1 times
jack987
7 months ago
The answer is correct: Yes, No, Yes
upvoted 1 times
ravindu123123
8 months ago
Yes This is Correct. 1 is Yes which means we can choose either hybrid or Capex/Opex, 2 is No
which means based on the OS and region cost will be changed final ans is No storage and VM
are two different things on Azure. Ravindu Premarathna.
upvoted 1 times
IvanDan
7 months ago
Yes for the last one. The VM uses storage and even when the VM deallocated, the content of the
VM remains intact. This means that the storage charge will still apply.
upvoted 1 times
aalatar
8 months ago
Correct answer. Yes, because you choose any service from cloud public or integrate with your
DataCetnter as Hybrid model ou build your private cloud with Azure. No, You spend in different
usage oubound data, Storage GB...etc Yes, you need to stop and deallocate and delete storage.
or delete VM with all resources.
upvoted 2 times
qnam

fisrt one is Yes. cuz i asked it to microsoft staff in Microsoft Azure Virtual Training Day.
upvoted 2 times
shayma

correct
upvoted 1 times
nExoR

typical malicious question to never be able to answer properly. 1. 'fleixble' - no Azure is always
OpEx, so there is no flexibility with Azure it-self. some said 'hybrid' - but the question is about
Azure. so dependently on how you understand 'flexible' it could be both - yes and no /: 2. no -
there are other features, such as disks, that cost may varry 3. again ... by default premium disks
are used, and these disks cost even when machine is deallocated. most question refer to
'defaults' so i would chose NO my answer: NO, NO, YES
upvoted 3 times
sinear

That is not correct. Upfront expenses with Azure, like Reservations, correspond to Capex as well.
So it does offer the flexibility to choose between opex/capex.
upvoted 2 times
theRunner

Azure can be Capex as well. You can lease Virtual machine scale sets, which are 1 or 3 year
agreement plans.
upvoted 2 times
shiva99

last one is true beacuse , stopping cause charges in ram,cpu,storage while deallocating to
dynamically or statically change ip addresses and thus save the costs
upvoted 1 times
Question #3Topic 1
HOTSPOT -
To complete the sentence, select the appropriate option in the answer area.
Hot Area:
Correct
Answer:
When you are implementing a Software as a Service (SaaS) solution, you are
responsible for configuring the SaaS solution. Everything else is managed by the cloud
provider.
SaaS requires the least amount of management. The cloud provider is responsible for
managing everything, and the end user just uses the software.
Software as a service (SaaS) allows users to connect to and use cloud-based apps over
the Internet. Common examples are email, calendaring and office tools
(such as Microsoft Office 365).
SaaS provides a complete software solution which you purchase on a pay-as-you-go
basis from a cloud service provider. You rent the use of an app for your organization
and your users connect to it over the Internet, usually with a web browser. All of the
underlying infrastructure, middleware, app software and app data are located in the
service provider‫ג‬€™s data center. The service provider manages the hardware and
software and with the appropriate service agreement, will ensure the availability and the
security of the app and your data as well.
Reference:
https://azure.microsoft.com/en-in/overview/what-is-saas/
https://docs.microsoft.com/en-gb/learn/modules/principles-cloud-computing/5-types-of-
cloud-services
pprajapa

Took the test today and this question was in exam. There was also another question about
dynamic groups in the exam.
upvoted 1 times
Gerardo1971
2 weeks, 5 days ago
Correct answer
upvoted 3 times
cmccron
1 month, 2 weeks ago

Quick question then: how is scalability determined? Wouldn't the customer be setting
limits/triggers on when/how much scaling occurs? From page 15 of the Microsoft AZ-900
textbook published on Aug. 14 2020: "If you need to customize the application or have any
control over its configuration, however, Saas might not be a good choice for you."
upvoted 1 times
sdas2021

This question came in the test yesterday
upvoted 2 times
studyali114

Yes, correct
upvoted 1 times
BABSJAY

Configuring the Saas as Solution
upvoted 1 times
panal

Correct
upvoted 2 times
rozlen

What does a SaaS customer need to configure
upvoted 1 times
ChickenWings

If you look at the Shared Responsibility Model - User needs to configure the Application and
Data
upvoted 5 times
ButterFine

Correct
upvoted 4 times
Question #4Topic 1
You have an on-premises network that contains several servers.
You plan to migrate all the servers to Azure.
You need to recommend a solution to ensure that some of the servers are available if a
single Azure data center goes offline for an extended period.
What should you include in the recommendation?
• A. fault tolerance
• B. elasticity
• C. scalability
• D. low latency
Correct Answer: A
Fault tolerance is the ability of a system to continue to function in the event of a failure
of some of its components.
In this question, you could have servers that are replicated across datacenters.
Availability zones expand the level of control you have to maintain the availability of the
applications and data on your VMs. Availability Zones are unique physical locations
within an Azure region. Each zone is made up of one or more datacenters equipped
with independent power, cooling, and networking. To ensure resiliency, there are a
minimum of three separate zones in all enabled regions. The physical separation of
Availability Zones within a region protects applications and data from datacenter
failures.
With Availability Zones, Azure offers industry best 99.99% VM uptime SLA. By
architecting your solutions to use replicated VMs in zones, you can protect your
applications and data from the loss of a datacenter. If one zone is compromised, then
replicated apps and data are instantly available in another zone.
References:
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/manage-availability
karmaDude

Availability Regions contain Availability Zones (Datacenters). If you have a mission-critical app
that your customers require access to frequently, you would want redundancy for your
databases, meaning you would like to have copies of databases spread across different yet
nearby AZs. Hence, in an event of a failure, your AZ should have "Fault Tolerance" Capability.
upvoted 38 times
NicolMJ

yes thanks for sharing
upvoted 2 times
ugreenhost

A is correct
upvoted 31 times
Gerardo1971

Correct answer
upvoted 1 times
Wiadvance
1 month ago
A is correct
upvoted 1 times
panal

A is correct
upvoted 1 times
RutuAZ900

Gave exam today, passed with 900. This site helped me a lot. There are new questions as well.
Please read thoroughly https://docs.microsoft.com/en-us/learn/paths/az-900-describe-cloud-
concepts/ . f you follow this site and basic concepts are clear you crack the AZ-900. Thank you!
upvoted 5 times
murat12345

It should be called 'disaster recovery' and not 'fault tolerance'.. right?
upvoted 2 times
Green72
3 weeks, 2 days ago

No. Disaster recovery is beeing able to restoring from backup. Fault tolerance is continue to
function with some parts broken (hard disk, a VM or a datacenter).
upvoted 1 times
tx45516

A is correct
upvoted 1 times

A. fault tolerance
upvoted 2 times
MCSA11

A. fault tolerance
upvoted 1 times
jack987
7 months ago
A is correct
upvoted 1 times
wisdomcharles

No questions were from here. All the comments are artificial. These questions are just for
experience nothing else.
upvoted 1 times
joyk

A is the right answer
upvoted 1 times
boboladele

Yeah A
upvoted 1 times
mlantonis

Correct it is A. In order to ensure that servers are available if a single data center goes offline
you need to have fault tolerance.
upvoted 1 times
KhatriRocks

Answer is Correct !
upvoted 1 times
sbwasnik

a is correct answer
upvoted 2 times
Question #5Topic 1
HOTSPOT -
Hot Area:
Correct
Answer:
A private cloud is hosted in your datacenter. Therefore, you cannot close your
datacenter if you are using a private cloud.
A public cloud is hosted externally, for example, in Microsoft Azure. An organization that
hosts its infrastructure in a public cloud can close its data center.
Public cloud is the most common deployment model. In this case, you have no local
hardware to manage or keep up-to-date ‫ג‬€" everything runs on your cloud provider's
hardware.
Microsoft Azure is an example of a public cloud provider.
In a private cloud, you create a cloud environment in your own datacenter and provide
self-service access to compute resources to users in your organization.
This offers a simulation of a public cloud to your users, but you remain completely
responsible for the purchase and maintenance of the hardware and software services
you provide.
Reference:
https://docs.microsoft.com/en-gb/learn/modules/principles-cloud-computing/4-cloud-
deployment-models
GPaulK
Highly Voted 2 months, 3 weeks ago

The answer is correct but the question could be worded better, IE "no longer requires its OWN
datacenter"
upvoted 12 times
johnyjohny1
1 month ago
No. The organization itself, as the question specifies, doesn't not require a data center, this is
now on Azure responsibility. Couldn't get clearer.
upvoted 2 times
Boboshlap

Correct, as you can also contract a private cloud from a 3rd party
upvoted 1 times
Arlyn
Most Recent 2 weeks ago

correct
upvoted 2 times
Gerardo1971
2 weeks, 4 days ago

Correct answer
upvoted 2 times
Pamban
3 weeks ago
this appeared on exam on 26/04/2021
upvoted 1 times
Diezvai
1 month, 1 week ago

Was in exam 08-apr-2021.
upvoted 1 times
panal

Correct
upvoted 2 times
delezac
3 months ago
Public cloud is correct
upvoted 2 times
Xpress

Correct
upvoted 4 times
Question #6Topic 1
What are two characteristics of the public cloud? Each correct answer presents a
complete solution.
• A. dedicated hardware
• B. unsecured connections
• C. limited storage
• D. metered pricing
• E. self-service management
Correct Answer: DE
With the public cloud, you get pay-as-you-go pricing ‫ג‬€" you pay only for what you use,
no CapEx costs.
With the public cloud, you have self-service management. You are responsible for the
deployment and configuration of the cloud resources such as virtual machines or web
sites. The underlying hardware that hosts the cloud resources is managed by the cloud
provider.
Incorrect Answers:
A: You don‫ג‬€™t have dedicated hardware. The underlying hardware is shared so you
could have multiple customers using cloud resources hosted on the same physical
hardware.
B: Connections to the public cloud are secure.
C: Storage is not limited. You can have as much storage as you like.
References:
deployment-models
rgalfaro

Cloud does provide (D) metered pricing, as you pay for the resources you use. Also provides (E)
a self-managed service, as you can use the portal to add, change and also remove the resources
you need when you need them.Hardware is shared among public cloud clients, so it is NOT
dedicated. Connections on cloud are SECURED, so B do not apply to Public Cloud. Storage is
virtually unlimited on the cloud, so C do not apply.
upvoted 58 times
ultraOriginalVillain
1 year, 1 month ago

so basically A,B,C do not make sense in the case of cloud computing so they are automatically
wrong and D, E are correct for just about any type of cloud storage (public, enterprise, private or
hybrid). It's a trick question where they mention public cloud simply as a catch/confusion.
upvoted 2 times
penguincapo

Isn't dedicated hardware provided to you in private cloud in case you hire a cloud provider to
implement your private cloud? Reserved Instances also I think provide dedicated hardware,
don't they? Please correct me if I am wrong.
upvoted 1 times
ugreenhost

D, E are correct
upvoted 36 times
Moonfire
Most Recent 1 week, 3 days ago

Correct
upvoted 1 times
Gerardo1971
2 weeks, 4 days ago
Correct answer
upvoted 1 times
panal

correct
upvoted 1 times
nigeldmgriffith

D & E ==> self-service via portal which is acquired through a subscription and metered pricing
which references your subscribed azure components and storage resource utilization.
upvoted 1 times
3141592

was in exam 20-1-2021
upvoted 3 times

D. metered pricing E. self-service management
upvoted 1 times
sachinkodagali
6 months ago
D, E is correct Hardware isnt dedicated as it can be shared between multiple users Connections
are secured Storage is not limited, well it depends on type of storage pack we go for
upvoted 1 times
Karthik_Krishnamoorthy

Cloud services are unlimited and pay as per usage. In this case, the answers would be D & E
upvoted 1 times
MCSA11

D. metered pricing E. self-service management
upvoted 1 times
rcher

Can dedicated host consider hardware? https://azure.microsoft.com/en-us/services/virtual-
machines/dedicated-host/
upvoted 1 times
dramedx

I agree..
upvoted 1 times
joyk

d,e are correct
upvoted 1 times
Alicezhang

Got this in my exam
upvoted 2 times
[Removed]

Sorry but I don't understand this question at all as well as it's answer, can someone please help
explain me?
upvoted 1 times
[Removed]
Sorry pasted this comment in wrong question, please ingore, I understood.
upvoted 2 times
OdinThor
9 months ago
D & E are correct
upvoted 1 times
Question #7Topic 1
HOTSPOT -
Hot Area:
Correct
Answer:
When planning to migrate a public website to Azure, you must plan to pay monthly
usage costs. This is because Azure uses the pay-as-you-go model.
Bassam22
1 week, 5 days ago

Correct
upvoted 2 times
Gerardo1971
2 weeks, 4 days ago

Correct answer
upvoted 2 times
Diezvai
1 month, 1 week ago

upvoted 2 times
pigandarias
1 month, 1 week ago

Appeared in 05/04/21 exam
upvoted 2 times
Socca

Not correct you sould deploy à VPN .you could payé your subscription /year
upvoted 1 times
cmccron

Ignore this comment. The answer is correct. VPN has nothing to do with this.
upvoted 10 times
panal

correct
upvoted 2 times
Alexandersss

yes, correct
upvoted 1 times
yoha1558

ok yesterday 18.02.21
upvoted 3 times
Xpress

Correct
upvoted 3 times
Question #8Topic 1
Note: This question is part of a series of questions that present the same scenario.
Each question in the series contains a unique solution that might meet the stated goals.
Some question sets might have more than one correct solution, while others might not
have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a
result, these questions will not appear in the review screen.
Your company plans to migrate all its data and resources to Azure.
The company‫ג‬€™s migration plan states that only Platform as a Service (PaaS)
solutions must be used in Azure.
You need to deploy an Azure environment that meets the company migration plan.
Solution: You create an Azure App Service and Azure SQL databases.
Does this meet the goal?
• A. Yes
• B. No
Correct Answer: A
Azure App Service and Azure SQL databases are examples of Azure PaaS solutions.
Therefore, this solution does meet the goal.
Xpress
Highly Voted 3 months, 1 week ago
Correct
upvoted 10 times
Gerardo1971

Correct answer
upvoted 1 times
JoSharp
3 weeks, 6 days ago

This is correct
upvoted 1 times
cmccron

Both of these are PaaS offerings according to the Microsoft textbook for AZ-900. Answer is
correct.
upvoted 2 times
sangie
2 months ago
Migrating resources means use virtual machines. So answer should be NO.
upvoted 1 times
ptjuanramos
1 month ago
So wrong
upvoted 3 times
cmccron

The question underneath this includes VMs and it is No there. This question is Yes however.
upvoted 1 times
Min_Thu
2 months ago
migration plan states that only Platform as a Service (PaaS) solutions must be used in Azure. So
only app services and sql service
upvoted 2 times
Vieiraarj

Correct
upvoted 1 times
panal

correct
upvoted 1 times
Question #9Topic 1
Solution: You create an Azure App Service and Azure virtual machines that have
Microsoft SQL Server installed.
• A. Yes
• B. No
Correct Answer: B
Azure App Service is a PaaS (Platform as a Service) service. However, Azure virtual
machines are an IaaS (Infrastructure as a Service) service. Therefore, this solution does
not meet the goal.
Gbucci72
2 weeks, 1 day ago

https://docs.microsoft.com/en-us/azure/azure-sql/azure-sql-iaas-vs-paas-what-is-overview Sql
server managed instance is PaaS so answer YES
upvoted 1 times
maaten
1 week, 5 days ago

read the question thoroughly... The company must only use PaaS solutions it says. The scenario
given says Azure VM and servers installed on that, Azure VM is IaaS.
upvoted 2 times
Gerardo1971
2 weeks, 4 days ago

Correct answer
upvoted 1 times
kumar78

given answer: Azure App Service is a PaaS (Platform as a Service) service. However, Azure virtual
machines are an IaaS (Infrastructure as a Service) service. Therefore, this solution does not meet
the goal. PaaS contains all services of IaaS plus additional Services. So, what do you say Over
solution is Yes, That is App Service and Virtual Machine together is PaaS even if VM is in IaaS.
Please some one shed some light on this.
upvoted 4 times
johnyjohny1
1 month ago
You have to go back and study the responsibility model a bit more. It has nothing to do with
"what's underneath", but what share of the responsibility lies on you, the buyer of the service.
When you get PaaS, you don't manage anything you would manage in IaaS. If you put your
servers in VMs, you have to manage infrastructure, thus you, as the user, are not doing PaaS.
upvoted 2 times
AnonymousUnicorn
I believe why its IaaS instead of PaaS is that the question states SERVER not DATABASE. Azure
SQL Database is a PaaS solution, while SQL Server is an IaaS solution. This question is confusing
since PaaS includes all the features of IaaS plus more but it wants a solution that is ONLY
available for PaaS and not available in IaaS. Check out these documentations for further details:
https://azure.microsoft.com/en-us/services/virtual-machines/sql-server/#faqs
https://docs.microsoft.com/en-us/azure/azure-sql/azure-sql-iaas-vs-paas-what-is-
overview#service-comparison
upvoted 2 times
panal

correct
upvoted 4 times
francenildo
3 months ago
Answer B.
upvoted 3 times
VPoo
3 months ago
Wouldn't VMs be included in PaaS? Answer should be "Yes" https://docs.microsoft.com/en-
us/learn/modules/fundamental-azure-concepts/categories-of-cloud-services PaaS Platform-as-
a-Service This cloud service model is a managed hosting environment. The cloud provider
manages the virtual machines and networking resources, and the cloud tenant deploys their
applications into the managed hosting environment. For example, Azure App Services provides a
managed hosting environment where developers can upload their web applications, without
having to worry about the physical hardware and software requirements.
upvoted 1 times
GuyForget
2 months ago
No, Virtual Machines are considered IaaS
upvoted 3 times
penguincapo
Azure VMs are IaaS strictly aren't they? Even with the SQL Server installed on them. The provider
does not manage the SQL Server
upvoted 4 times
Question #10Topic 1
Solution: You create an Azure App Service and Azure Storage accounts.
• A. Yes
• B. No
Correct Answer: B
Azure App Service is a PaaS (Platform as a Service) service. However, Azure Storage
accounts are an IaaS (Infrastructure as a Service) service. Therefore, this solution does
not meet the goal.
bayurzx

Azure Storage is a PaaS https://docs.microsoft.com/en-us/learn/modules/azure-networking-
fundamentals/azure-virtual-network-fundamentals Check Video At 1:14
upvoted 29 times
AVP_Riga
1 week, 6 days ago

Thanks!
upvoted 1 times
aztrain
2 weeks, 6 days ago
your link goes to Azure Networking
upvoted 1 times
JaytotheGee
1 month ago
Agree, Azure Storage is PaaS. For me, IaaS for Storage is, for example, when you create a virtual
domains in the storage array and provide tenants the access with a restricted set of resources of
the array (i.e. limited space, limited ports), so each tenant has control only of his resources and
decides what type of volumes he wants to create and how he wants to present them.
upvoted 1 times
Massy

I agree, Azure Storage is Paas
upvoted 7 times
aaasdf

heh, you even pasted the link... storage is IaaS so the answer is correct
https://azure.microsoft.com/en-us/overview/what-is-iaas/
upvoted 13 times
sebastiantf
Most Recent 4 days, 13 hours ago

searching for Storage Account on azure website takes us to https://azure.microsoft.com/en-
us/product-categories/storage/ which is also listed under Azure IaaS in
https://azure.microsoft.com/en-us/overview/what-is-azure/iaas/#products
upvoted 1 times
rodrigorbonfim
1 week, 2 days ago

Question incorrect: Azure Storage is PaaS
upvoted 1 times
datanerd79
2 weeks ago
The answer is here from ms official video 1, time 1:15 Source: https://docs.microsoft.com/en-
us/learn/modules/azure-networking-fundamentals/azure-virtual-network-fundamentals
upvoted 1 times
cocorech
2 weeks, 2 days ago

The Answer is YES Azure offers three main cloud computing platform services: SaaS – Software
as a Service. IaaS – Infrastructure as a Service. PaaS – Platform as a Service.
upvoted 1 times
cocorech
2 weeks, 2 days ago

The Answer is YES Azure App Service is a fully managed "Platform as a Service" (PaaS) that
integrates Microsoft Azure Websites, Mobile Services, and BizTalk Services into a single service,
adding new capabilities that enable integration with on-premises or cloud systems.
upvoted 1 times
Gerardo1971
2 weeks, 4 days ago

Correct answer
upvoted 1 times
antares5403
1 month ago
does anyone know what the actual answer to this one is?
upvoted 1 times
CARIOCA
1 month, 1 week ago

This question is very divided in the feedback after all what would be the answer and which
justified it?
upvoted 1 times
Kennxfc

It depends on what you're using it for. For instance, if you're making use of the Azure Disk, this
will be IaaS, But using the blub makes it PaaS. But this question says storage account and that
makes the answer to be wrong to the best of my knowledge
upvoted 4 times
kumar78

The company's migration plan states that only Platform as a Service (PaaS) solutions must be
used in Azure. Solution: You create an Azure App Service and Azure Storage accounts. Does this
meet the goal?. App Service is in Paas, Even if Store Account is in IaaS, PaaS has all services of
IaaS and More. So, overall i guess together (Apps Service + Storage Account) comes under PaaS.
So, Answer is Yes according to me. Please let me know comments on this?
upvoted 2 times
rob_724
2 months ago
Storage account is IAAS? So containers and blobs we have to manage them? Cause I don't think
so..
upvoted 1 times
Arko_Brad
2 months ago
Storage can be both IaaS and PaaS depending on which storage you are looking for. Hence the
answer seems right
upvoted 2 times
ikholidd
3 weeks, 3 days ago

agree, because Azure Storage is also used by infrastructure as a service virtual machines, and
platform as a service cloud services.
upvoted 1 times
bcih
Storage is PaaS (Do you have to install VM or manage de OS on the Storage? No) My answer to
the question is YES.
upvoted 2 times
andrelouco
2 months ago
I agree with you.
upvoted 1 times
cybercloudlad

Azure Storage has IaaS and Paas within it. Azure storage accounts would fall under IaaS. It is
confusing because with most cloud applications, storage features are typically a form of PaaS
but the key in this question is "Azure Storage Accounts". That is why is correct to state that this
would not be a proper solution. Source: https://docs.microsoft.com/en-
us/answers/questions/221143/azure-storage-account-is-iaas-or-
paas.html#:~:text=In%20my%20mind%20Azure%20Storage,inside%20virtual%20machine(s).&te
xt=Azure%20Storage%20accounts%20are%20an%20IaaS%20service.
upvoted 2 times
ikholidd
3 weeks, 3 days ago

Azure Storage is also used by infrastructure as a service virtual machines, and platform as a
service cloud services.
upvoted 1 times
AnonymousUnicorn

This question is confusing since PaaS includes all the features of IaaS plus more but the question
wants a solution that is ONLY available for PaaS and not available in IaaS. Since storage is a part
of IaaS then you do not meet your goal of picking only PaaS solutions. Check out these
documentations for further details: https://docs.microsoft.com/en-us/azure/azure-sql/azure-sql-
iaas-vs-paas-what-is-overview#service-comparison
upvoted 2 times
Question #11Topic 1
Your company hosts an accounting application named App1 that is used by all the
customers of the company.
App1 has low usage during the first three weeks of each month and very high usage
during the last week of each month.
Which benefit of Azure Cloud Services supports cost management for this type of usage
pattern?
• A. high availability
• B. high latency
• C. elasticity
• D. load balancing
Correct Answer: C
Elasticity in this case is the ability to provide additional compute resource when needed
and reduce the compute resource when not needed to reduce costs.
Autoscaling is an example of elasticity.
Elastic computing is the ability to quickly expand or decrease computer processing,
memory and storage resources to meet changing demands without worrying about
capacity planning and engineering for peak usage. Typically controlled by system
monitoring tools, elastic computing matches the amount of resources allocated to the
amount of resources actually needed without disrupting operations. With cloud
elasticity, a company avoids paying for unused capacity or idle resources and
doesn‫ג‬€™t have to worry about investing in the purchase or maintenance of additional
resources and equipment.
References:
https://azure.microsoft.com/en-gb/overview/what-is-elastic-computing/
ugreenhost

C is right
upvoted 30 times
MiBol

A distinction between scalability and elasticity is that elasticity is done automatically.
upvoted 20 times
1 year, 1 month ago

also elasticity implies scaling DOWN, automatically as well, in a timely manner.
upvoted 5 times
Gerardo1971

Correct answer
upvoted 1 times
VishalShahQA
1 month, 1 week ago

C is the correct answer
upvoted 1 times
Diezvai
1 month, 1 week ago

upvoted 4 times
Kuljenny0
1 month, 1 week ago

Correct
upvoted 1 times
pigandarias
1 month, 1 week ago

upvoted 1 times
panal

correct
upvoted 1 times
JD365
This was on the exam on 12th Feb 2021
upvoted 4 times
panal

C is right
upvoted 1 times

The answer is C. elasticity
upvoted 2 times

As per the requirement, the benefit of cost needs to be looked up with the usage pattern. Hence
the app should be scalable; i.e. scale in and scale out to cater the needs usage which will help to
optimize the cost.
upvoted 2 times
MCSA11

C. elasticity
upvoted 1 times
brandotiago

This was on the exam. elasticity
upvoted 1 times
Ravi_2912

This was one of the questions. Exam date - 28/9/20. Thanks team for putting up this together.
upvoted 3 times
Parth9

C is right
upvoted 1 times
Praveen22
10 months ago
Elasticity is correct, seeing this response in a different way even load balancing makes sense.
Last week load is high, you can use that as one of the feature
upvoted 1 times
Question #12Topic 1
You plan to migrate a web application to Azure. The web application is accessed by
external users.
You need to recommend a cloud deployment solution to minimize the amount of
administrative effort used to manage the web application.
• A. Software as a Service (SaaS)

• B. Platform as a Service (PaaS)
• C. Infrastructure as a Service (IaaS)
• D. Database as a Service (DaaS)
Correct Answer: B
Azure App Service is a platform-as-a-service (PaaS) offering that lets you create web
and mobile apps for any platform or device and connect to data anywhere, in the cloud
or on-premises. App Service includes the web and mobile capabilities that were
previously delivered separately as Azure Websites and Azure Mobile
Services.
References:
https://docs.microsoft.com/en-us/azure/security/fundamentals/paas-applications-using-
app-services
JasonB

I don't understand the response to this question, why it is PaaS and not SaaS?
upvoted 24 times
simplist

It is a custom web app deployed to Azure. If it was a MS product, then it would be a SaaS.
Otherwise, your own apps deployed into cloud run on PaaS ( they just provide the environment,
"platform")
upvoted 278 times
BluSamketi

Thanks for the enlightenment
upvoted 4 times
abhx

that was helpful
upvoted 2 times
CanoSys
8 months ago
Great explanation, thank you.
upvoted 3 times
chaituchowdary

less admin work paas
upvoted 1 times
Gbase
6 months ago
The Intention/catch phrase here is " minimize administrative effort" and that's what PaaS does, it
gives some level of control/administration unlike SaaS
upvoted 1 times
Isaacjb7
SaaS doesn't allow indepth administration unlike PaaS
upvoted 1 times
sbettani

A is wrong because SaaS isn't ment to manage web applications, SaaS is just a software, like S4B.
C Is wrong because IaaS is the cloud solution with the highest administrative effort (Like virtual
machines) D Is wrong, databases are ment to store data ecc...
upvoted 11 times
Gerardo1971

Correct answer
upvoted 1 times
CARIOCA
1 month, 1 week ago

The solution existing in SaaS choose it if you don't choose to mount it in Paas. So in my opinion
the answer would be letter A.
upvoted 1 times
jesssy
1 month, 1 week ago

I was thinking it's SaaS, since it requires least management....
upvoted 1 times
cmccron

B is correct. SaaS is too high of a service level and you don't import custom applications at that
level of service. PaaS is most suitable in this case. IaaS will have the company managing things
from an administrative standpoint that they don't need to be when the web application is their
main focus. This answer is correct.
upvoted 1 times
panal

correct
upvoted 1 times
panal

B is right
upvoted 1 times
chaudha4

PaaS is correct even though Saas might seem like an option. In this case, your web app might
very well be a SaaS solution to your customers, but as an Azure customer, you are only using
their PaaS solution to deploy your software.
upvoted 1 times
nigeldmgriffith

B ==> PaaS; subscriber manages, develops and deploys applications and data.
upvoted 1 times
Joseandelaguila

PaaS - For example, Azure App Services provides a managed hosting environment where
developers can upload their web applications.
upvoted 2 times

The answer is B. platform as a service (PaaS)
upvoted 1 times
boink
B is correct Azure App Service is a platform-as-a-service (PaaS) offering that lets you create web
and mobile apps for any platform or device and connect to data anywhere, in the cloud or on-
premises. App Service includes the web and mobile capabilities that were previously delivered
separately as Azure Websites and Azure Mobile Services.
upvoted 1 times

Requirement is to deploy a cloud solution minimize the amount of administrative effort used to
manage the web application. It isn't clear on this case and assume that it is a custom application
in this case. Hence we should go for PaaS.
upvoted 1 times
MCSA11

B. platform as a service (PaaS)
upvoted 1 times
noji
8 months ago
Correct answer
upvoted 1 times
pranayamr

its correct answer as you can host web app as Azure Application as Service
upvoted 1 times
Question #13Topic 1
HOTSPOT -
Which cloud deployment solution is used for Azure virtual machines and Azure SQL
databases? To answer, select the appropriate options in the answer area.
Hot Area:
Correct
Answer:
Box 1:
Azure virtual machines are Infrastructure as a Service (IaaS).
Infrastructure as a Service is the most flexible category of cloud services. It aims to give
you complete control over the hardware that runs your application (IT infrastructure
servers and virtual machines (VMs), storage, networks, and operating systems). Instead
of buying hardware, with IaaS, you rent it.
Box 2:
Azure SQL databases are Platform as a Service (Paas).
Azure SQL Database is a fully managed Platform as a Service (PaaS) Database Engine
that handles most of the database management functions such as upgrading, patching,
backups, and monitoring without user involvement. Azure SQL Database is always
running on the latest stable version of SQL Server
Database Engine and patched OS with 99.99% availability. PaaS capabilities that are
built-in into Azure SQL database enable you to focus on the domain specific database
administration and optimization activities that are critical for your business.
Reference:
https://docs.microsoft.com/en-gb/learn/modules/principles-cloud-computing/5-types-of-
cloud-services https://docs.microsoft.com/en-us/azure/sql-database/sql-database-paas-
index
thakur

correct
upvoted 37 times
PvR1991

But what is then de difference between Azure Storage account (IaaS) and Azure SQL DB (PaaS)
upvoted 6 times
Yaroslav

Azure Storage Account is NOT IaaS don't confuse it with a Storage (disc)
upvoted 7 times
sebastiantf

when searching for Azure Storage Account on the azure website, it takes you to
https://azure.microsoft.com/en-us/product-categories/storage/ which is listed under IaaS in
https://azure.microsoft.com/en-us/overview/what-is-azure/iaas/#products
upvoted 1 times
MIU
2 weeks, 5 days ago

Guy, Azure Storage Account is IaaS...
upvoted 1 times
MIU
2 weeks, 5 days ago
Sorry, mistakdd. Azure Storage Account is NOT IaaS... but PaaS.
upvoted 1 times
foreverlearner
1 year ago
"An Azure storage account contains all of your Azure Storage data objects: blobs, files, queues,
tables, and disks. " Azure SQL Database is PaaS as the underlying SQL Server is managed by
Azure. You don't have to install and configure it, you only manage the databases. If you were to
install SQL Server inside a VM, then this would be IaaS
upvoted 28 times
Akagami_Shanks
5 months ago
Thanks for clarifying!
upvoted 3 times
xenoc

upvoted 2 times
VijuNadikuda
1 week ago
Got this in exam 11/5/21
upvoted 3 times
Moonfire
1 week, 3 days ago

Correct
upvoted 2 times
Gerardo1971
2 weeks, 4 days ago

Correct answer
upvoted 1 times
Pamban
3 weeks ago
upvoted 3 times
VishalShahQA
1 month, 1 week ago

Azure SQL Database Microsoft manages the platform.
upvoted 1 times
Diezvai
1 month, 1 week ago

upvoted 2 times
pigandarias
1 month, 1 week ago

upvoted 2 times
pigandarias
1 month, 1 week ago

upvoted 1 times
mtokons

Its right
upvoted 1 times
breton
I agree. They're correct.
upvoted 1 times
panal

correct
upvoted 1 times
nigeldmgriffith

Azure VM ==> IaaS SQL Database ==> PaaS
upvoted 1 times
SarathJD

VM-Iaas SQL-Paas
upvoted 1 times
Ritz40

IAAS PAAS
upvoted 2 times
Question #14Topic 1
You have an on-premises network that contains 100 servers.
You need to recommend a solution that provides additional resources to your users.
The solution must minimize capital and operational expenditure costs.
• A. a complete migration to the public cloud

• B. an additional data center
• C. a private cloud
• D. a hybrid cloud
Correct Answer: D
A hybrid cloud is a combination of a private cloud and a public cloud.
Capital expenditure is the spending of money up-front for infrastructure such as new
servers.
With a hybrid cloud, you can continue to use the on-premises servers while adding new
servers in the public cloud (Azure for example). Adding new servers in
Azure minimizes the capital expenditure costs as you are not paying for new servers as
you would if you deployed new server on-premises.
Incorrect Answers:
A: A complete migration of 100 servers to the public cloud would involve a lot of
operational expenditure (the cost of migrating all the servers).
B: An additional data center would involve a lot of capital expenditure (the cost of the
new infrastructure).
C: A private cloud is hosted on on-premises servers to this would involve a lot of capital
expenditure (the cost of the new infrastructure to host the private cloud).
References:
deployment-models
DerelictX

Correct answer is D - Hybrid cloud. Utilize current resources and dynamically scale in public
cloud if and when needed.
upvoted 71 times
SadioMane

Answer is D. First, The question is not asking to get ride of the already existing on-premise
server. Second, we need to optimize the service as well as cutting the cost. So using little bit of
the cloud (cheaper) in addition to the physical servers we have. which is Hybrid approach.
upvoted 10 times
cherrada

If you need additional resources the better option is a Hybrid cloud with minimal CAPEX/OPEX
upvoted 59 times
Gianlucag77
1 year ago
additional resources "to users", I think the answer is C
upvoted 2 times
ptjuanramos
1 month ago
How hosting a private cloud could increase the additional resources and keep on track de CapEx
expending's?
upvoted 1 times
tracyrow
Most Recent 1 day, 14 hours ago

the question asks about the additional resources, it does not ask about the existing servers or
migration. Thus additional would be public.
upvoted 1 times
VivekDhoble
2 weeks, 2 days ago

Hybrid is incorrect as there is no mention of Public cloud; answer is C Private Cloud
upvoted 1 times
Emsheeran
1 week, 1 day ago

nope, they already mention (you have an on-premises network that contain 100 servers) on-
premises mean it's Private cloud..
upvoted 1 times
Gerardo1971
2 weeks, 4 days ago

Correct answer
upvoted 1 times
CARIOCA
1 month, 1 week ago

I am in doubt about this question: Depending on the model you want to implement, Private if
you want complete responsibility, Public if you want to share the responsibility with the
company that provides the service or Hibrido - https://docs.microsoft.com/en-
gb/learn/modules/fundamental- azure-concepts / - Cruel doubt the final answer would be
Hybrid. This question is very divided in the feedback, after all what would be the answer and
what was the definitive justification?
upvoted 1 times
davidoemirich

The answer is D Because there is a private cloud already, and the public cloud will be the
additional one which will minimize CapEx and OpEx. The combination of this two will make up a
Hybrid cloud
upvoted 1 times
Jeffdu

This is a lot of discussion for one question, it ends up being confusing to some people.
upvoted 4 times
esousa
2 months ago
D is correct, because in a a hybrid cloud you can use your licenses(If you are using windows
server), you dont need to pay for this.
upvoted 2 times
sams
2 months ago
answer is PRIVATE because the questions says there is already an on-prem system set up - so
having a private on top of the on-prem is cost effective rather than going Hybrid with existing
on-prem (hybrid is Private + public) so its not even logically possible to go hybrid if there is no
existing public set up
upvoted 1 times
Sandy14nove

Hybrid is correct answer
upvoted 2 times
breton

Hybrid cloud is the right choice in this scenario.
upvoted 2 times
panal

Correct Answer is D
upvoted 1 times
Above101

Answer : D Explanation: A hybrid cloud is a combination of a private cloud and a public cloud.
Capital expenditure is the spending of money up-front for infrastructure such as new servers.
With a hybrid cloud, you can continue to use the on-premises servers while adding new servers
in the public cloud (Azure for example). Adding new servers in Azure minimizes the capital
expenditure costs as you are not paying for new servers as you would if you deployed new
server on-premises. Incorrect Answers: A: A complete migration of 100 servers to the public
cloud would involve a lot of operational expenditure (the cost of migrating all the servers). B: An
additional data center would involve a lot of capital expenditure (the cost of the new
infrastructure). C: A private cloud is hosted on on-premises servers to this would involve a lot of
capital expenditure (the cost of the new infrastructure to host the private cloud). References:
deployment-models
upvoted 3 times
nigeldmgriffith

D ==> Utilizing the hybrid solution you fulfill all the customer's requirements. Hybrid addresses
the management of OPEX and CAPEX as well as improves resource management.
upvoted 1 times
rocaj

if the question mentions anything about not sharing data/Infra outside, private cloud could be
the answer, but in this case "hybrid cloud" is most appropriate.
upvoted 1 times
HiraPBI

Answer is Hybrid Cloud. Refer to below link: https://azure.microsoft.com/en-us/overview/what-
are-private-public-hybrid-clouds/#benefits It clearly states "When computing and processing
demand fluctuates, hybrid cloud computing gives businesses the ability to seamlessly scale up
their on-premises infrastructure to the public cloud to handle any overflow".
upvoted 2 times
Question #15Topic 1
HOTSPOT -
select No.
Hot Area:
Correct
Answer:
Box 1: No -
It is not true that a company must always migrate from a private cloud model to
implement a hybrid cloud. You could start with a public cloud and then combine that
with an on-premise infrastructure to implement a hybrid cloud.
Box 2: Yes -
A company can extend the capacity of its internal network by using the public cloud.
This is very common. When you need more capacity, rather than pay out for new on-
premises infrastructure, you can configure a cloud environment and connect your on-
premises network to the cloud environment by using a VPN.
Box 3: No -
It is not true that only guest users can access cloud resources. You can give anyone
with an account in Azure Active Directory access to the cloud resources.
There are many authentication scenarios but a common one is to replicate your on-
premises Active Directory accounts to Azure Active Directory and provide access to the
Azure Active Directory accounts. Another commonly used authentication method is
‫ג‬€˜Federation‫ג‬€™ where authentication for access to cloud resources is passed to
another authentication provider such as an on-premises Active Directory.
https://azure.microsoft.com/en-gb/overview/what-is-hybrid-cloud-computing/
dorhost

Flexibility in Hybrid Cloud: you can take advantage of additional resources in the public cloud
when you need them. Answer: NO, YES, NO
upvoted 42 times
Danao

Should be No, No, No. Hybrid cloud will extend internal network.
upvoted 26 times
Karenwithak
3 weeks, 2 days ago

I disagree. It is not stating it will extend the internal network. It is stating it can extend the
CAPACITY of the network. Meaning you can offload resources into the public cloud easier than
in your internal network.
upvoted 2 times
Gbase
6 months ago
I agree
upvoted 1 times
samhouston

100% agree. N, N, N. How can you increate Network Capacity (Ability to handle Large data
Traffic) Just by extending your private network?
upvoted 3 times
Akay47

No, Hybrid cloud is the mixture of private and public cloud. So basically you do not extend
internal network to Hybrid cloud, you extend to public cloud.
upvoted 3 times
Gerardo1971

Correct answer
upvoted 2 times
Sunnyvale
3 weeks, 6 days ago

It was in Apr-20-2021 Exam. I got confused for this question in exam. So prepare well. I looked
at it but forgot in exam and i think I got it right. A company can extend the capacity of its
internal network by using the public cloud.
upvoted 1 times
Diezvai
1 month, 1 week ago

upvoted 1 times
breton

With the Hybrid cloud model, the second option is right and others two are correct. So, I agree.
upvoted 1 times
bcih

correct
upvoted 1 times
NicolMJ
3 months ago
Yes. A company can extend the capacity of its internal network by using the public cloud. This is
very common. When you need more capacity, rather than pay out for new on-premises
infrastructure, you can configure a cloud environment and connect your on-premises network to
the cloud environment by using a VPN
upvoted 1 times
panal

No Yes No is correct
upvoted 3 times
Kiry

https://azure.microsoft.com/en-us/resources/videos/extending-your-premises-to-microsoft-
azure-with-virtual-networks-and-expressroute/
upvoted 1 times
SarathJD

No, Yes, No
upvoted 1 times
dny99gha

The way I see #2 is that by moving resources to the cloud, capacity will be freed up in the
internal network, thereby extending the available capacity.
upvoted 2 times
NanaKing

In the second case, a company can extend the capacity of its internal network by using the
public cloud because, the internal network in a public cloud can be accessed by every member
of the public, so the company will extend its internal network capacity to cater for the needs of
the public, so it is a YES The third one is as clear as the word clear; in a public cloud model, it is
not only guest users a a company that can access the resources in the cloud since the public
cloud is a shared entity whereby multiple corporations can each use a portion of the resources
in the cloud. This makes it a NO. So in my opinion, the first is NO, the second is Yes and the
third is NO
upvoted 3 times
NanaKing

First of all, to achieve a hybrid cloud model, a company doesn't necessarily have to migrate from
a private cloud. This means that it is a "NO" here. My reason is this, the company only needs to
deploy part of it's private cloud into public cloud thereby making the entire model a hybrid
cloud model. OR, the company can as well add a public cloud model to its existing private cloud
to host some of it's resources making it hybrid cloud model too.
upvoted 1 times

The answer N, Y, and N
upvoted 2 times
abhx

the idea is not to get too deep into the question as I believe the purpose is to check the
foundational knowledge. So by taking the question just the way its written, the answer is N,Y,N.
upvoted 3 times
MCSA11

No Yes No
upvoted 3 times
Question #16Topic 1
You plan to migrate several servers from an on-premises network to Azure.
What is an advantage of using a public cloud service for the servers over an on-
premises network?
• A. The public cloud is owned by the public, NOT a private corporation

• B. The public cloud is a crowd-sourcing solution that provides corporations with the ability
to enhance the cloud
• C. All public cloud resources can be freely accessed by every member of the public
• D. The public cloud is a shared entity whereby multiple corporations each use a portion of
the resources in the cloud
Correct Answer: D
The public cloud is a shared entity whereby multiple corporations each use a portion of
the resources in the cloud. The hardware resources (servers, infrastructure etc.) are
managed by the cloud provider. Multiple companies create resources such as virtual
machines and virtual networks on the hardware resources.
Incorrect Answers:
A: The public cloud is not owned by the public. In the case of Microsoft Azure, the cloud
is owned by Microsoft.
B: The public cloud is a not crowd-sourcing solution. In the case of Microsoft Azure, the
cloud is owned by Microsoft.
C: It is not true that public cloud resources can be freely accessed by every member of
the public. You pay for a cloud subscription and create accounts for your users to
access your cloud resources. No one can access your cloud resources until you create
user accounts and provide the appropriate access permissions.
Limitless69
Highly Voted 1 month, 2 weeks ago

D may not be a wonderful benefit of migrating to the cloud, but it is the closest among all the
given options in the questions
upvoted 7 times
Jabs777

I concur with D👌
upvoted 5 times
Moonfire
Most Recent 1 week, 1 day ago
D is correct
upvoted 1 times
Banibrata
1 week, 5 days ago

D is the correct answer
upvoted 1 times
God2029
1 week, 5 days ago

D is the only option that make sense among the given options
upvoted 1 times
AVP_Riga
1 week, 6 days ago

Right. But I don't agree that it is a plus. You can be disconnected at any time if you, for example,
are subject to US sanctions.
upvoted 1 times
Gerardo1971
2 weeks, 4 days ago

Correct answer
upvoted 1 times
IAmAFighterGal
1 month ago
The definition looks familiar with the 'community cloud' model. So though D could be the right
option here, there should have been a better description of advantage mentioned here.
upvoted 1 times
iubaidmabrook

D is the correct one
upvoted 1 times
rob_724
2 months ago
D is factual -- but is not considered an advantage. but IDK.. just roll with it lol
upvoted 1 times
Jai2301
2 months ago
correct: A
upvoted 1 times
sdv26
2 months ago
D is not so clear though
upvoted 1 times
joelgraves
2 months ago
A, B and C are incorrect; but D is not a description of an advantage. 'Cloud provider manages
hardware' is an advantage.
upvoted 3 times
Sheduic7720
2 months ago
I think you are correct as i see that c is not an advantage for the public cloud over the private
upvoted 1 times
bcih

correct: D
upvoted 1 times
Question #17Topic 1
HOTSPOT -
Hot Area:
Correct
Answer:
Azure Site Recovery helps ensure business continuity by keeping business apps and
workloads running during outages. Site Recovery replicates workloads running on
physical and virtual machines (VMs) from a primary site to a secondary location.
Reference:
https://docs.microsoft.com/en-us/azure/site-recovery/site-recovery-overview
KP_MSA

The answer here should be "disaster recovery"
upvoted 77 times
Fire_Starter
1 month, 1 week ago

Disaster recovery is a whole replica of the data center set up and not just a single VM. IF a single
VM has issues, fault tolerance should be able to cover for that downtime, hence Azure site
recovery set up
upvoted 4 times
MOsama1

Disaster recovery is the recovery of a service after a failure. For example, restoring a virtual
machine from backup after a virtual machine failure.
https://searchdisasterrecovery.techtarget.com/definition/cloud-disaster-recovery-cloud-DR
upvoted 2 times
DennisWitjes

https://azure.microsoft.com/en-us/services/site-recovery/. Agreed!
upvoted 11 times
asdqwerwq

i agree
upvoted 1 times
DH

https://docs.microsoft.com/en-us/azure/site-recovery/site-recovery-overview You can set up
disaster recovery of Azure VMs from a primary region to a secondary region. ans:disaster
recovery
upvoted 11 times
Roy_study
1 week, 4 days ago

Site Recovery contributes to your business continuity and disaster recovery (BCDR) strategy, by
orchestrating and automating replication of Azure VMs between regions, on-premises virtual
machines and physical servers to Azure, and on-premises machines to a secondary datacenter.
upvoted 1 times
rochie

should be disaster recovery
upvoted 1 times
Yeldi
2 days ago
Nowhere in the Exam Ref AZ-900 book, or any course I followed Site Recovery has been ever
mentioned once as a solution! This comes totally out of the blue. When reading the given link,
disaster recovery is mentioned explicitly as one of the features of Site Recovery, but as a part of
the Business Continuity and Disaster Recovery plan. It offers business continuity *while*
handling a disaster recovery in the background, hence the answer should be indeed 'fault
tolerance.' That said, I never heard or read about Site Recovery until today.
upvoted 1 times
PatrickH

From the Azure Website: "Site Recovery is a native disaster recovery as a service (DRaaS), and
Microsoft has been recognized as a leader in DRaaS based on completeness of vision and ability
to execute by Gartner in the 2019 Magic Quadrant for Disaster Recovery as a Service." Therefore
Disaster Recovery
upvoted 1 times
ABhi101
4 days ago
Fault Tolerance is associated with VM,here its not mentioning anything about it and moreover
site recovery mostly talks about the disaster recovery options, hence answer should be " Disaster
recovery"
upvoted 1 times
sebastiantf

https://azure.microsoft.com/en-us/services/site-recovery/ it says right here that Azure Site
Recovery is Disaster Recovery
upvoted 1 times
xenoc
5 days, 7 hours ago

upvoted 2 times
VijuNadikuda
1 week ago
Appeared on 11/5/21.
upvoted 2 times
Anna_A
1 week, 4 days ago

You can set up disaster recovery of Azure VMs from a primary region to a secondary region.
Azure Site Recovery helps ensure business continuity by keeping business apps and workloads
running during outages. Site Recovery replicates workloads running on physical and virtual
machines (VMs) from a primary site to a secondary location.
upvoted 1 times
Banibrata
1 week, 5 days ago

Disaster recovery should be the correct answer
upvoted 1 times
Isshwarya
1 week, 6 days ago

Disaster recovery is the answer as per Microsoft documentation of this service
upvoted 1 times
argoth
3 weeks ago
Disaster Recovery is the right answer. [...]You can set up disaster recovery of Azure VMs from a
primary region to a secondary region.[..]
upvoted 3 times
Pamban
3 weeks ago
upvoted 1 times
NawafAli
3 weeks, 4 days ago

I think Fault tolerance is correct because disaster recovery is the process and design principle
which allows a system to recovers from natural or human induced disasters. while fault
tolerance is the ability to maintain system uptime while physical and service component failures
happen
upvoted 2 times
jgrizolli
3 weeks, 4 days ago

100% right "disaster recovery"
upvoted 2 times
lily70
3 weeks, 5 days ago

There is something similar between fault tolerance and disaster recovery.
upvoted 1 times
Question #18Topic 1
In which type of cloud model are all the hardware resources owned by a third-party and
shared between multiple tenants?
• A. private
• B. hybrid
• C. public
Correct Answer: C
Microsoft Azure, Amazon Web Services and Google Cloud are three examples of public
cloud services.
Microsoft, Amazon and Google own the hardware. The tenants are the customers who
use the public cloud services.
VijuNadikuda
1 week ago
Appeared on 11/5/21
upvoted 2 times
Moonfire
1 week, 1 day ago

C is the answer
upvoted 1 times
DonSly
2 weeks, 2 days ago

C is the correct answer but I strongly suggest that Alibaba Cloud be included as one among the
public cloud too
upvoted 1 times
Gerardo1971
2 weeks, 4 days ago

Correct answer
upvoted 1 times
leejiayu0601
1 month ago
C is correct
upvoted 1 times
Muhamamd
1 month ago
Correct C
upvoted 1 times
Kuljenny0
1 month, 1 week ago

Correct
upvoted 1 times
Malima2

Correct and short answer
upvoted 1 times
Aby6622

confusing question--
upvoted 1 times
MIU
2 weeks, 5 days ago

"ALL" hardware resources, is the tip. Hybrid includes Private...
upvoted 1 times
johnyjohny1
1 month ago
...how? Private -> Owned by you, using services on the cloud. Hubrid -> Using hardware both
on-premise and cloud. Public, exactly what the question says.
upvoted 1 times
Jai2301
2 months ago
correct:C
upvoted 1 times
depal_dhir
2 months ago
Public
upvoted 4 times
Question #19Topic 1
HOTSPOT -
Hot Area:
Correct
Answer:
Reference:
John756
1 day, 20 hours ago

Hybrid since it requires an on-premise Microsoft SQL
upvoted 1 times
xenoc
5 days, 7 hours ago
upvoted 2 times
VijuNadikuda
1 week ago
Got this on 11/5/21
upvoted 1 times
Arlyn
2 weeks ago
Correct Hybrid
upvoted 3 times
sachin
2 weeks, 1 day ago

Correct Answer ( Hybrid )
upvoted 2 times
Gerardo1971
2 weeks, 4 days ago

Correct answer
upvoted 1 times
leejiayu0601
1 month ago
Hybrid
upvoted 1 times
Muhamamd
1 month ago
Correct Hybrid
upvoted 1 times
Temiogundeji
2 months ago
Its a combination of both on-premise(private) and on-cloud (public)
upvoted 2 times
Jai2301
2 months ago
hybrid
upvoted 1 times
AleTato
2 months ago
Correct.
upvoted 2 times
nikonik
2 months ago
Why hybrid and not public?
upvoted 2 times
AZSant87
4 weeks, 1 day ago

If you read the question, it says which model should worked with On-Premise network. So,
Hybrid is only who can be combination of Private as well as Public.
upvoted 2 times
Edyu
2 months ago
Azure app is public, while on-premise is private; it's a combination, thus, hybrid.
upvoted 5 times
Chief
1 month ago
Thanks
upvoted 1 times
EmilioDeBaku
2 months ago
it is an AZURE app and queries ON-PREMISES database.
upvoted 2 times
max7861
2 months ago
Because it's on-premises envirnmnt
upvoted 3 times
Question #20Topic 1
You have 1,000 virtual machines hosted on the Hyper-V hosts in a data center.
You plan to migrate all the virtual machines to an Azure pay-as-you-go subscription.
You need to identify which expenditure model to use for the planned Azure solution.
Which expenditure model should you identify?
• A. operational
• B. elastic
• C. capital
• D. scalable
Correct Answer: A
One of the major changes that you will face when you move from on-premises cloud to
the public cloud is the switch from capital expenditure (buying hardware) to operating
expenditure (paying for service as you use it). This switch also requires more careful
management of your costs. The benefit of the cloud is that you can fundamentally and
positively affect the cost of a service you use by merely shutting down or resizing it
when it's not needed.
Reference:
https://docs.microsoft.com/en-us/azure/architecture/cloud-adoption/appendix/azure-
scaffold
rgalfaro

The expenditure models are either CapEx or OpEx (Capital or Operational). CapEx is what you
pay upfront, on prem, for servers, racks, cooling, security, the Datacenter itself. OpEx is what you
pay to keep your infrastructure operational, like IT staff. In this case, when you move to the
Cloud, what you identify in this case is the OpEx or Operational model. This is because you
actually don't have CapEx on the Cloud (or at least you look to minimize CapEx) as you pay for
the resources you use and not for the underlying hardware, security, cooling, etc that you will
pay for in an On-Prem solution. That is why the right answer is (A) Operational. Elastic and
Scalable are not expenditure models.
upvoted 310 times
Escee
1 month ago
Great explanation.. i was wondering why operational until i read your comments
upvoted 1 times
NicolMJ

Thanks for the explanation.
upvoted 1 times
AleTato

YOU ROCK!!!!
upvoted 1 times
shubh120

great explanation
upvoted 1 times
Gerardo1971

Correct answer
upvoted 1 times
moulouya
2 weeks, 4 days ago

Great , thx for the explanation
upvoted 1 times
whizjohn
1 month ago
It's either operational, OpEx or capital, CapEx and it's operational in this case
upvoted 1 times
Muhamamd
1 month ago
Corrrect Operational
upvoted 1 times
Diezvai
1 month, 1 week ago

upvoted 1 times
RicardoCavalcanti
1 month, 1 week ago

I saw questions stating that the prepaid plan is Capex
upvoted 1 times
HemaJ

Yes operational is right answer. I got carried away with elasticity as the expense model when it is
a cloud characteristic but not an expense model.
upvoted 2 times
Escee
1 month ago
Good point...
upvoted 1 times
panal

Correct Answer is A
upvoted 1 times
robin

Nice twist. Correct answer is A (Operational) which refers to OPEX. CAPEX is invalid inn this
scenario. Other 2 are not expense models.
upvoted 1 times
nigeldmgriffith

A ==> Azure public cloud is directly related to OPEX (operational expenditure).
upvoted 1 times
Brouhaha

https://docs.microsoft.com/en-us/azure/cloud-adoption-framework/strategy/business-
outcomes/fiscal-outcomes : Operating expenditures are ongoing costs of doing business.
Consuming cloud services in a pay-as-you-go model could qualify as an operating expenditure.
upvoted 1 times
Montino

The correct answer is A because there are only two expenditure models which is Capital or
operational and capital is meant for infrastructures on-premise which is not applicable in the
cloud. You only deal with operation cost/expenditure in the cloud.
upvoted 1 times
nigeldmgriffith

A; the intention is to migrate all servers to Azure pay-as-you-go which automatically speaks to
OPEX.
upvoted 1 times

Since the plan is to migrate all the virtual machines to an Azure "Pay-As-You-Go" subscription.
The expenditure model to use for the planned Azure solution is Operational (OpEx).
upvoted 2 times
MCSA11

A. operational
upvoted 1 times
joyk

OpEx is correct
upvoted 1 times
Question #21Topic 1
DRAG DROP -
Match the Azure Cloud Services benefit to the correct description.
Instructions: To answer, drag the appropriate benefit from the column on the left to its
description on the right. Each benefit may be used once, more than once, or not at all.
NOTE: Each correct match is worth one point.
Select and Place:
Correct
Answer:
Box 1:
Fault tolerance is the ability of a service to remain available after a failure of one of the
components of the service. For example, a service running on multiple servers can
withstand the failure of one of the servers.
Box 2:
Disaster recovery is the recovery of a service after a failure. For example, restoring a
virtual machine from backup after a virtual machine failure.
Box 3:
Dynamic scalability is the ability for compute resources to be added to a service when
the service is under heavy load. For example, in a virtual machine scale set, additional
instances of the virtual machine are added when the existing virtual machines are under
heavy load.
Box 4:
Latency is the time a service to respond to requests. For example, the time it takes for a
web page to be returned from a web server. Low latency means low response time
which means a quicker response.
References:
https://msdn.microsoft.com/en-us/magazine/mt422582.aspx
https://searchdisasterrecovery.techtarget.com/definition/cloud-disaster-recovery-cloud-
DR http://www.siasmsp.com/the-benefit-of-scalability-in-cloud-computing-2/
https://azure.microsoft.com/en-in/overview/what-is-cloud-computing/
xenoc
5 days, 7 hours ago

upvoted 2 times
sachin
2 weeks, 1 day ago

I think it should be fault tolerance, disaster recovery, dynamic scalability and low latency
upvoted 1 times
Sunnyvale
3 weeks, 6 days ago

expect these type of questions in exam. I got similar one not same on Apr-20-21. Know the high
level concept and you can map it.
upvoted 3 times
bcih

correct
upvoted 2 times
bcih

correct
upvoted 1 times
panal

correct
upvoted 3 times
luisdiamond
3 months ago
I would like to check, if I answer three questions right, it will be 3 points at the end of the exam
correct?
upvoted 1 times
cab123

I would also like to know how is the scoring, and how many you can fail?
upvoted 1 times
Huda123
3 months ago
it should be fault tolerance, disaster recovery, low latency and dynamic scalability right ??
upvoted 1 times
SherlockHolmes
3 months ago
no. latency is specific to time, in data transfer, packets, etc. scalability is about how quickly it can
expand more or small depending on need
upvoted 5 times
Question #22Topic 1
HOTSPOT -
select No.
Hot Area:
Correct
Answer:
Box 1: No -
It is not true that a company must always migrate from an internal network to implement
a hybrid cloud. You could start with a public cloud and then combine that with an on-
premise infrastructure to implement a hybrid cloud.
Box 2: Yes -
A company can extend the computing resources of its internal network by using the
public cloud. This is very common. When you need more resources, rather than pay out
for new on-premises infrastructure, you can configure a cloud environment and connect
your on-premises network to the cloud environment by using a VPN.
Box 3: No -
It is not true that only guest users can access cloud resources. You can give anyone
with an account in Azure Active Directory access to the cloud resources.
There are many authentication scenarios but a common one is to replicate your on-
premises Active Directory accounts to Azure Active Directory and provide access to the
Azure Active Directory accounts. Another commonly used authentication method is
‫ג‬€˜Federation‫ג‬€™ where authentication for access to cloud resources is passed to
another authentication provider such as an on-premises Active Directory.
Reference:
fuddyduddy
Highly Voted 3 weeks, 5 days ago
Answer is YYN Here's why answer 1 as given is wrong. It states "It is not true that a company
must always migrate from a private cloud model or must first have a private cloud to implement
a hybrid cloud. You could start with a public cloud and then combine that with an on-premise
infrastructure to implement a hybrid cloud." This is true. But how can you have a hybrid with
having BOTH on-prem and online infrastructure in place? Think about it - If you start with on-
prem then you need to first have online infrastructure before you can be considered hybrid. And
if you start online then you need to have on-prem infrastructure before you can be considered
hybrid. So you need have both first. Until then, you are either private or public but not hybrid.
upvoted 17 times
fuddyduddy
1 day, 22 hours ago

My previous answer stands but I should have said "But how can you have a hybrid withOUT
having both on-prem and online infrastructure in place?" BTW, another way of thinking about
this is: How can you run Azure AD Connect without on-premises AD? Or run the Exchange
Hybrid Configuration Wizard?
upvoted 1 times
Arqueiro
2 weeks, 1 day ago

I agree with the YYN. I think that the first "Y" is due to what is asked: "to implement". The
question does not refer about "when" or in which moment implement that, so "to implement" a
hibrid cloud you MUST have an on-prem infra first.
upvoted 1 times
jecaine
2 weeks, 2 days ago

i agree the answer doesn't justify the question. The explanation is the same as in question 1, but
the question is worded differently.
upvoted 4 times
tomas

No, Yes, No
upvoted 11 times
opeyemi658
Most Recent 3 days ago

The answer is correct as NYN, but tricky, an organization can achieve a hybrid cloud by
connecting their public cloud to an onpremise infrastructure like a database or file server, this
onpremise infrastructure might not require internal network. So the answer is absolutely correct.
upvoted 2 times
Tintin_06
1 day, 1 hour ago

I don't get it... even if host only one ressource on prem, how would connect it to the cloud
without a L2 or L3 connectivity to your SP ?
upvoted 1 times
Yeldi
2 days ago
I stand with your explanation. Thanks.
upvoted 1 times
erwintje
1 week, 2 days ago

Amswer is right. A internal network is not a must to get a hybrid cloud. You can have a private
cloud and then make a hybrid cloud. Question is saying a must so seccond question is NO.
upvoted 1 times
Franco11
1 week, 3 days ago

Tricky One
upvoted 1 times
Arqueiro
1 week, 4 days ago

The answer for the #1 is YES. The explanation provided here ... "It is not true that a company
must always migrate from an internal network to implement a hybrid cloud ..." applies to a
different question, that question is: "To acheive a hybrid cloud model, a company must always
migrate from a private cloud model". There is a slight different between those 2 questions, this
one here says that to have a hybrid cloud model you must have an internal (on-premises)
network, and the answer is YES, otherwise you are just public. No internal network, no hybric
cloud. You must have it. The other question says that you MUST ALWAYS migrate from a private
cloud, and the answer is the explanation provided in this quesiton. No, you can go from public
cloud to hybrid or from private cloud to hybrid. So, the answer provided for the question #1 is
wrong. It was a mistake in my opinion.
upvoted 3 times
Franco11
1 week, 6 days ago

The 1st One should be yes. the question didn't state a PRIVATE , it said internal, How can u have
hybrid without an on-premises network ? it's a combination of both.
upvoted 2 times
AniketG
3 days ago
what if you just have one public facing server and no internal network, you can still go for hybrid
upvoted 1 times
ceasar3000
4 weeks ago
Answer is YYN Hybrid cloud: This computing environment combines a public cloud and a private
cloud by allowing data and applications to be shared between them.
https://docs.microsoft.com/en-us/learn/modules/intro-to-azure-fundamentals/what-is-cloud-
computing
upvoted 2 times
Diezvai
1 month, 1 week ago

upvoted 2 times
pigandarias
1 month, 1 week ago

upvoted 2 times
szczerbi1718

Answer is correct
upvoted 3 times
Jai2301
2 months ago
No Yes No
upvoted 2 times
xMilkyMan123

Answer is correct
upvoted 2 times
mkrishna39

N,n,n is the ans
upvoted 1 times
Nocando

No, no, no. Here is why. You have a private clound and want to extend it. With a public cloud.
Resulting in a hybrid cloud but you won't expand your private infrastructure by a hybrid one.
upvoted 4 times
SomeoneEd

What do you consider as hybrid cloud? If you have a good technical understanding of this term,
then there's nothing wrong with the answer given. A company can extend it's computing
resources by using a hybrid cloud (simply a combination of his on premises infra and the use of
public resources within a public infra).
upvoted 5 times
Gomza

@tomas when are your sitting for the exam. I am due on wednesday.
upvoted 2 times
Question #23Topic 1
HOTSPOT -
select No.
Hot Area:
Correct
Answer:
MukeshJ

A PaaS provides option to change the pricing tier and each tier has different processing capacity
to offer. So the Ans is Yes
upvoted 52 times
Nikulsinh
3 weeks, 4 days ago

I agree
upvoted 1 times
hercu
2 months ago
I agree. Correct answers in this case are: Box 1 - No Box 2 - Yes Box 3 - Yes Explanation for Box
2: https://docs.microsoft.com/en-us/azure/app-service/manage-scale-up
upvoted 39 times
jecaine
2 weeks, 2 days ago

this question is repeated elsewhere with different answers. I agree with Hercu
upvoted 1 times
Swati072
2 months ago
Agree. https://docs.microsoft.com/en-us/azure/app-service/manage-scale-up
upvoted 3 times
SnakePlissken

Given answer is wrong. Should be: No, Yes, Yes. This is the same question as 31 where the right
answer is given. Pricing tiers for PaaS: https://docs.microsoft.com/en-us/azure/mysql/concepts-
pricing-tiers
upvoted 13 times
AniketG

Azure App Service plan overview https://docs.microsoft.com/en-us/azure/app-service/overview-
hosting-plans
upvoted 1 times
xenoc
5 days, 7 hours ago

upvoted 2 times
Ankit290

Please let us know, what is the correct answer.
upvoted 1 times
pprajapa

The answer on Question 31 contradicts what is here for the second question.
upvoted 1 times
aks007
1 week, 1 day ago

Box 2 - Yes One minute silence for the guys who peep into the answer and jumped to next
question without checking the discussion
upvoted 5 times
sgtpw
1 week, 6 days ago

You literally have the EXACT same question with a different answer. C'mon man! this doesn't
make any sense. Please correct it
upvoted 2 times
Rishubelgium
2 weeks, 1 day ago

no , yes, yes
upvoted 1 times
sachin
2 weeks, 1 day ago

It should be NYY
upvoted 1 times
JagadishKrish
2 weeks, 2 days ago

Exam-Topics Team: Please change the answer to Box 1 - No Box 2 - Yes Box 3 - Yes You have
Q31 which is same as this where it is marked as No/Yes/Yes, it is confusing to readers because
most of us rely on the answers provided here.
upvoted 2 times
Gerardo1971
2 weeks, 3 days ago

No, Yes , Yes
upvoted 1 times
SunilBudhwani
2 weeks, 3 days ago

Scale up: Get more CPU, memory, disk space, and extra features like dedicated virtual machines
(VMs), custom domains and certificates, staging slots, autoscaling, and more. You scale up by
changing the pricing tier of the App Service plan that your app belongs to.
upvoted 1 times
dzungcode
2 weeks, 5 days ago

No Yes Yes
upvoted 1 times
Pamban
3 weeks ago
upvoted 2 times
Honeywell_EMP
3 weeks, 2 days ago

The Ans should be - N Y Y
upvoted 1 times
FT_5
3 weeks, 4 days ago

I think the given answer is correct. Scaling up or down was not mentioned in box 2
upvoted 1 times
noubog02
1 month ago
Cas 1 NO Cas 2 oui Cas 3 oui
upvoted 2 times
Question #24Topic 1
Your company has an on-premises network that contains multiple servers.
The company plans to reduce the following administrative responsibilities of network
administrators:
✑ Backing up application data
✑ Replacing failed server hardware
✑ Managing physical server security
✑ Updating server operating systems
✑ Managing permissions to shared documents
The company plans to migrate several servers to Azure virtual machines.
You need to identify which administrative responsibilities will be eliminated after the
planned migration.
Which two responsibilities should you identify? Each correct answer presents a
complete solution.
• A. Replacing failed server hardware

• B. Backing up application data
• C. Managing physical server security
• D. Updating server operating systems
• E. Managing permissions to shared documents
Correct Answer: AC
Azure virtual machines run on Hyper-V physical servers. The physical servers are
owned and managed by Microsoft. As an Azure customer, you have no access to the
physical servers. Microsoft manage the replacement of failed server hardware and the
security of the physical servers so you don‫ג‬€™t need to.
Incorrect Answers:
B: Microsoft have no control over the applications you run on the virtual machines.
Therefore, it is your responsibility to ensure that application data is backed up.
D: Microsoft do not manage the operating systems you run on the virtual machines.
Therefore, it is your responsibility to ensure that the operating systems are updated.
E: Microsoft have no control over the shared folders you host on the virtual machines.
Therefore, it is your responsibility to ensure that folder permissions are configured
appropriately.
giri021

A & C is correct brother
upvoted 31 times
CallMeRaccoon
Highly Voted 9 months ago

Your company has an on-premises ( = PHYSICAL) network that contains multiple servers. The
company plans to reduce administrative responsibilities of network administrators: ***Physical
servers migrated to Azure virtual machines*** correct: A. Replacing failed server hardware - so
no more PHYSICAL hardware to replace C. Managing physical server security - No PHYSICAL
servers, No PHYSICAL security to care about. incorrect: B. Backing up application data - you'll
still need to backup app data D. Updating server operating systems - VM OS still need to be
updated... E. Managing permissions to shared documents - Also this still need to be managed.
upvoted 20 times
pranayamr

correct B,D,E falls under "Shared responsibility"
upvoted 1 times
HarryNL

It's confusing at best: It reeds: "The company plans to migrate SEVERAL servers to Azure virtual
machines." SEVERAL means NOT ALL! Thus there are still severs on-premise. So, none of the
answers are correct.
upvoted 1 times
FabianLeon
1 week, 4 days ago

"The company plans to REDUCE the following administrative responsibilities". Reduce, not
eliminate.
upvoted 1 times
Gerardo1971
2 weeks, 3 days ago

Correct answer
upvoted 1 times
IAmAFighterGal
1 month ago
This cme on 10Apr2021. I guess I marked A and C only.
upvoted 2 times
freshmaker

A and C. migrated servers to Azure will eliminate Hardware overhead.
upvoted 3 times
Allan85

Also D................................................
upvoted 1 times
22blaze
3 weeks, 4 days ago
IaaS, VMs you have complete control of the OS, so you still need to update the OS. Correct
answers are indeed A&C only.
upvoted 1 times
Dineshvishe

What does the question say "The company plans to migrate several servers to Azure virtual
machines." -- Azure Virtual Machine which is IaaS service. Now if they migrate to IaaS service,
they don;t have to bother about "Failed Hardware" or "Physical Security of the server" as it will
be taken care by Azure.
upvoted 1 times
panal

Correct answer is A & C.
upvoted 1 times
UnaDauSiPapaCanta

This question came up on 30.01.2021 at my exam. A and C are the correct answers.
upvoted 5 times
newbieaz

A & C, all responsibility related to hardwares will be taken care of cloud provider.
upvoted 1 times
Sud10
5 months ago
A C are most suitable 2 answers. Migration to will completely eliminate need for physical
security as well as hardware maintenance.
upvoted 1 times
rickdme
5 months ago
Should be A, C, and D. In the shared responsibility model you are still responsible for the
operating system. So all there are not reduced, however if you say reduced the most, then A and
C.
upvoted 1 times
kev94

A et C are correct
upvoted 1 times
MCSA11

A. Replacing failed server hardware C. Managing physical server security
upvoted 2 times
mac_wonder

why cant the answer be B and D
upvoted 1 times
Ava_M

The responsibility for anything "physical" falls on the provider. So administrating those are taken
off your hands.
upvoted 1 times
Question #25Topic 1
HOTSPOT -
select No.
Hot Area:
Correct
Answer:
One of the major changes that you will face when you move from on-premises cloud to
the public cloud is the switch from capital expenditure (buying hardware) to operating
expenditure (paying for service as you use it).
Box 1: No -
With the pay-as-go model, you pay for services as you use them. This is Opex
(Operational Expenditure), not CapEx (Captial Expenditure). CapEx is where you pay
for something upfront. For example, buying a new physical server.
Box 2: No -
Paying for electricity for your own datacenter will be classed as CapEx, not OpEx.
Box 3: Yes -
Deploying your own datacenter is an example of CapEx. This is because you need to
purchase all the infrastructure upfront before you can use it.
Reference:
https://docs.microsoft.com/en-us/azure/architecture/cloud-adoption/appendix/azure-
scaffold
Green72

Electricity is an OpEx acording to google. I'd answer No, Yes, Yes
upvoted 20 times
ckw_1206
1 week, 2 days ago

Agree with you, Electricity is an OpEx.
upvoted 3 times
magdoc

yes Electricity is OpEx
upvoted 2 times
rosrav
2 weeks, 2 days ago

I agree with this. The answer should be incorrect. It is No, Yes, Yes. When a lecturer explained to
me OpEx he used Electricity as an example.
upvoted 6 times
tracyrow
Electricity costs are op cost to a company. Even if tied to a dc which we consider on-prem cap to
generate.
upvoted 1 times
Thao_Mi
1 day, 22 hours ago

So the answers are: N,Y,Y instead?
upvoted 1 times
Lipseal
2 days, 3 hours ago

I had this on my exam (May 2021). Electricity is OpEx. Y/N. I believe Microsoft class electricity as
CapEx as it's part of the datacenter costs. But I could be wrong. I answered Y :(
upvoted 2 times
Gerardo1971

Electricity is Opex. N,Y,Y
upvoted 1 times
opeyemi658
3 days ago
Paying for electricity should be an operational expense as its a recurring expense, so the correct
answer should be NYY
upvoted 1 times
lr_ms700

No ,Yes, Yes
upvoted 1 times
ManoelPinto

I also agree that the answer should be N, Y, Y - eletricity is OpEx.
upvoted 1 times
XDPhoenixx

It say's "Paying electricity for OUR datacenter is an example of OpEx.". Don't they mean the
Azure datacenters by that? Like ABhi101 also mentioned. Though it's still is OpEx for the
customer of Azure and also OpEx ofcourse for Azure Infra Manamgenent. I can imagine they
paid of all of they electric bills in advance ;-)
upvoted 2 times
Moonfire
1 week, 1 day ago

NO, NO, YES is the correct ans
upvoted 2 times
rb2021
1 week, 4 days ago

CAPEX = capital expenditure OPEX = operational expenditure Electricity is an operational
expenditure (OPEX). OpEx is particularly appealing if the demand fluctuates or is unknown, in
our case Electricity will depend on volume and usage ;)
upvoted 1 times
subbro55
1 week, 5 days ago

You pay a monthly electrical bill. Electricity is an Operational Expenditure. If you use more
electricity you have to pay more. You don't buy it ahead of time and have it depreciate in value
over time.
upvoted 3 times
manijani
2 weeks, 2 days ago

Why electricity payment is Capex? it's a running expense so it should be Opex
upvoted 3 times
ABhi101
1 week, 4 days ago

electricity expense will be taken care by Microsoft...its an capital cost for Azure infra
Management hence...Capex not Opex
upvoted 3 times
jecaine
2 weeks, 2 days ago

How is paying for electricity for your own datacenter classed as CapEx, not OpEx? Don't you pay
for electricity over time? Operational expenditures are paid for over time, not something you
need to save for and pay upfront. Shouldn't this be N, N, Y?
upvoted 1 times
jecaine
2 weeks, 1 day ago

Sorry I typed that wrong. I agree with the rest of you. N,Y,Y
upvoted 1 times
paywall
2 weeks, 2 days ago

should be N,N,Y Paying electricity is OpEX. OpEx is your operating costs, the expenses to run
day-to-day business, like services and consumable items that get used up and are paid for
according to use. This includes printer cartridges and paper, electricity, and even yearly services
like website hosting or domain registrations. These things are necessary for your business’s
success but are not considered major long-term investments like CapEx items.
upvoted 2 times
jecaine
1 week ago
don't you mean N,Y,Y then?
upvoted 1 times
DMAzureBoy
1 week ago
I take it you meant to say N,Y,Y
upvoted 1 times
Question #26Topic 1
You plan to provision Infrastructure as a Service (IaaS) resources in Azure.
Which resource is an example of IaaS?
• A. an Azure web app

• B. an Azure virtual machine
• C. an Azure logic app
• D. an Azure SQL database
Correct Answer: B
An Azure virtual machine is an example of Infrastructure as a Service (IaaS).
Azure web app, Azure logic app and Azure SQL database are all examples of Platform
as a Service (Paas).
References:
https://azure.microsoft.com/en-gb/overview/what-is-iaas/
suspect12

if you get this wrong you shouldn't be taking the test...
upvoted 62 times
pasqua

B is the correct answer
upvoted 12 times
Kwento

Correct B. Virtual Machines
upvoted 1 times
Gerardo1971
2 weeks, 3 days ago

Correct answer
upvoted 1 times
Muhamamd
1 month ago
Correct B. Virtual machines
upvoted 2 times
Atma
1 month, 1 week ago

B is correct
upvoted 1 times
panal

Correct
upvoted 1 times
mikl

B is correct - doesnt come easier that this.
upvoted 2 times
levape
5 months ago
an Azure SQL database is also IaaS?
upvoted 2 times
Urpiano

No, It's PaaS. With Azure SQL Database your unique concern is the Database, but not the
underlaying Computer/Operating System/Operating System Updates, etc.
upvoted 3 times
Kashan_Ali
Azure "Virtual Machine" is an example of "Infra as a Srvc"
upvoted 1 times
mais

hope to get similar questions lol
upvoted 7 times
Cloudyuga
11 months ago
correct its Azure VM (IaaS)
upvoted 3 times
karmaDude

B is correct.
upvoted 1 times
tpascal
1 year, 1 month ago

it is B
upvoted 1 times
Question #27Topic 1
To which cloud models can you deploy physical servers?
• A. private cloud and hybrid cloud only

• B. private cloud only
• C. private cloud, hybrid cloud and public cloud
• D. hybrid cloud only
Correct Answer: A
A private cloud is on-premises so you can deploy physical servers.
A hybrid cloud is a mix of on-premise and public cloud resources. You can deploy
physical servers on-premises.
Reference:
chrisc10196

I assume that when they say 'deploy', they mean actually racking a server yourself. You don't do
this with Azure dedicated hosts so the answer is A.
upvoted 10 times
MIU
2 weeks, 4 days ago

I think this is not only about Azure, just a general question.
upvoted 1 times
AniketG

Private cloud means your own data center, yes you can deploy servers in your data center
upvoted 1 times
xenoc
5 days, 7 hours ago

upvoted 2 times
t213
1 week ago
Was on the exam 08-05-2021
upvoted 2 times
Gerardo1971
2 weeks, 3 days ago

Correct answer
upvoted 3 times
Pamban
3 weeks ago
upvoted 4 times
Sreeram1
1 month, 1 week ago

The question asks about "physical server"- which means the servers you can see and touch,
deploying with your hands. Even though you are deploying a dedicated host, still its not
physically available for you. Here answer is D because Hybrid (a combination of physical data
center and cloud) has a physical DC, so you have physical server there, and a private cloud (only
for your organaisation) is setup by you, here also physical servers available. Hope this clarifies.
upvoted 1 times
Fire_Starter
1 month, 1 week ago

The answer should be A - you will have physical servers in both a private cloud (fully on-prem)
and in a hybrid cloud (a mix of private and public)
upvoted 2 times
Laksiri

We deploy only in private data centers. It comes under private cloud model and hybrid cloud
models. So, the correct answer is A
upvoted 4 times
Breatnach

Can someone please explain why the response D (hybrid only) is not correct? The difference
between private and public cloud is that I am not sharing the resources with anyone else, not
that the servers are physical. IMO - the only time physical servers play a role is in a hybrid
model.
upvoted 1 times
Fire_Starter
1 month, 1 week ago

The answer should be A - you will have physical servers in both a private cloud (fully on-prem)
and in a hybrid cloud (a mix of private and public). In a public cloud, you cannot physically
assess or touch the servers, you don't oversee or cater to the hardware.
upvoted 1 times
soumya_

We can use dedicated hosts in azure..why only option A?
upvoted 2 times
johnyjohny1
1 month ago
Because you don't actually deploy a physical server, as the question says.
upvoted 1 times
Question #28Topic 1
DRAG DROP -
Match the cloud model to the correct advantage.
Instructions: To answer, drag the appropriate cloud model from the column on the left to
its advantage on the right. Each cloud model may be used once, more than once, or not
at all.
NOTE: Each correct match is worth one point
Select and Place:
Correct
Answer:
Box 1: Public Cloud -

With a public cloud, there is no capital expenditure on server hardware etc. You only
pay for cloud resources that you use as you use them.
Box 2: Private Cloud -
A private cloud exists on premises, so you have complete control over security.
Box 3: Hybrid Cloud -

A hybrid cloud is a mix of public cloud resources and on-premises resources. Therefore,
you have a choice to use either.
AleTato

Correct
upvoted 10 times
John756

Correct
upvoted 1 times
Gerardo1971
2 weeks, 3 days ago

Correct answer
upvoted 1 times
Pamban
3 weeks ago
upvoted 2 times
SomeoneEd
1 month, 1 week ago

An additional info in the question would better clarify some doubts help. Physical Security is
much more clearer than just security.
upvoted 2 times
danish_22
Correct
upvoted 1 times
IndianaBones

Correct
upvoted 1 times
Question #29Topic 1
HOTSPOT -
select No.
Hot Area:
Correct
Answer:
Box 1: No -
You cannot add physical servers to the public cloud. You can only deploy virtual servers
in the public cloud. You can extend a private cloud by deploying virtual servers in a
public cloud. This would create a hybrid cloud.
Box 2: Yes -
A hybrid cloud is a combination of a private cloud and public cloud. Therefore, to create
a hybrid cloud, you must deploy resources to a public cloud.
Box 3: No.
It is not true that a private cloud must be disconnected from the Internet. Private clouds
can be and most commonly are connected to the Internet. ‫ג‬€Private cloud‫ג‬€ means that
the physical servers are managed by you. It does not mean that it is disconnected from
the Internet.
References:
https://azure.microsoft.com/en-gb/overview/what-are-private-public-hybrid-clouds/
km_cloud

I think, no, no, no
upvoted 15 times
Franco11
1 week, 3 days ago

How can you Have Hybrid Cloud Without recourses on the public cloud?
upvoted 1 times
fuddyduddy
1 day, 22 hours ago

I agree N,N,N too. Here's why: I have a tenant. I don't have any subscriptions. This means that I
can't create any resources at all. (I do have a SPO web site but that is not an Azure Resource.)
But I use AAD Connect to sync some of my on-prem security principals (users and groups) to my
tenant. This means that my environment is hybrid. I could even run Exchange Hybrid
Configuration Wizard if I wanted. So I have a hybrid environment without resources. This means
that you don't need to create resources in the cloud to be hybrid.
upvoted 1 times
jecaine
1 week ago
it says "Deploy." You can have a private and public cloud, but you don't have to deploy
resources from your private cloud to the public cloud. you can add new resources that don't
exist on your private cloud. For example: If John Smith exists in AD on your Domain Controller,
you don't have to migrate his user record to AzureAD, you can add Susie Q separately, therefore
you have a hybrid cloud but you're not deploying resources to the public cloud
upvoted 1 times
nicky_nyasha
4 weeks ago
I think you are right
upvoted 1 times
Amitkj2989

Not sure about answer 2. You can deploy resources to private cloud as well in case of hybrid,
why MUST deploy to public cloud only?
upvoted 11 times
JBPI
1 month, 1 week ago

I agree. My assumption based on the statement is that there is no private cloud yet. So it won't
be a hybrid if this is deployed only in the public cloud.
upvoted 2 times
NasheM

In hybrid you deploy to both public and private cloud. It doesn't say ONLY public but you have
to have something deployed in public cloud, otherwise it's just private cloud not hybrid
upvoted 15 times
Illumielle

I don't see the word "only".
upvoted 1 times
BabieTee

must in the sentence takes the place of only
upvoted 2 times
cab123

no, "must" means you have to, because you have to have something in the cloud, it does not
mean "only"
upvoted 1 times
MIU
2 weeks, 4 days ago

In case the user Already had Public Cloud only, then if he prepares on-premises servers or
Private Cloud, they would be Hybrid. So...I think No/No/No in this question.
upvoted 1 times
t213
Most Recent 1 week ago

upvoted 2 times
AmiraBedhiafi
And what's the correct answer?
upvoted 2 times
Jekky
1 week, 5 days ago

I think the answer is correct because you must deploy both private and public clouds for you to
have a hybrid cloud
upvoted 3 times
0byte
1 week, 5 days ago

Agree, Correct answer: N Y N. According to MS (https://azure.microsoft.com/en-
gb/overview/what-is-hybrid-cloud-computing/): What is a hybrid cloud? A hybrid cloud—
sometimes called a cloud hybrid—is a computing environment that combines an on-premises
datacenter (also called a private cloud) with a public cloud, allowing data and applications to be
shared between them. So, basically you have to have public cloud connected with some of your
private resources. By "you must deploy resources…" I think they simply mean to use some
resources from public cloud i.e. if you extend to public cloud to us its storage that makes it
hybrid.
upvoted 3 times
Mecca
1 week, 6 days ago

Question 2 is Correct but Poorly worded. If you read it as a statement then Yes, if you read it as
a scenario then No.
upvoted 3 times
Gerardo1971
2 weeks, 3 days ago

Correct answer
upvoted 2 times
aztrain
2 weeks, 5 days ago

Useless q&a due to how the question is worded. Typical MS exam question that never went
through any QA
upvoted 1 times
Vsvalentinex
1 week, 4 days ago

sometimes a question is meant to be tricky or confusing, due to a phrase or a word
upvoted 1 times
SimonR2
1 month, 1 week ago

I would say point 2 should be NO. Simply because we could be starting with a public cloud,
adding resources to that does not create a hybrid cloud.
upvoted 3 times
serjrps
1 month, 1 week ago

Question 1 is actually debatable. In theory, you can transform your private servers into a shared
resource and thus create a public cloud, which would also be a valid answer. It's obvious that
they want the other answer, but the question as it is is tricky, in my opinion.
upvoted 1 times
TheMaster
1 month, 1 week ago

Question 2, it makes no sense you must deploy resources to public cloud. Wouldn't it be "Yes" if
you must deploy resources to private cloud?
upvoted 1 times
Note33

Im quite not clear for the box 2. What does it mean.
upvoted 1 times
Ktroy0005
Trick question, of course we can’t add physical server to public cloud since Microsoft owns it
upvoted 2 times
Min_Thu
2 months ago
why must create resource in public cloud ? we can deploy resource in private cloud and
configure apps in pubic cloud.
upvoted 1 times
BabieTee

yes, you can have a web app in public cloud and have the SQL database in private cloud .
upvoted 1 times
Liquad

With SaaS, we don't need to deploy resources to public cloud. We only configure app. So the
2nd one may be False.
upvoted 1 times
BabieTee

Saas is public cloud . so if you are to have hybrid, it public and private
upvoted 1 times
panal
3 months ago
Correct
upvoted 4 times
Nathan_
3 months ago
not sure if the first one is correct can anyone explain to me why it would be correct?
upvoted 2 times
kwekkwekforsale
3 months ago
because you cannot "physically" add your own servers to Microsoft's data center, which is the
public cloud.
upvoted 13 times
Question #30Topic 1
You have 50 virtual machines hosted on-premises and 50 virtual machines hosted in
Azure. The on-premises virtual machines and the Azure virtual machines connect to
each other.
Which type of cloud model is this?
• A. hybrid
• B. private
• C. public
Correct Answer: A
References:
Moonfire
1 week, 1 day ago

Definitely hybrid.
upvoted 1 times
Gerardo1971
2 weeks, 3 days ago

Correct answer
upvoted 1 times
Muhamamd
1 month ago
Correct Hybrid
upvoted 1 times
rob_724
2 months ago
Textbook definition of hybrid cloud
upvoted 1 times
CodePoet
2 months ago
AZ-900 Questions are too cheap!
upvoted 2 times
srikar5902
2 months ago
Lmao.. rookie questions
upvoted 1 times
Question #31Topic 1
HOTSPOT -
select No.
Hot Area:
Correct
Answer:
Box 1: No -
A PaaS solution does not provide access to the operating system. The Azure Web Apps
service provides an environment for you to host your web applications.
Behind the scenes, the web apps are hosted on virtual machines running IIS. However,
you have no direct access to the virtual machine, the operating system or
IIS.
Box 2: Yes -
Box 3: Yes -
A PaaS solution that hosts web apps in Azure does provide the ability to scale the
platform automatically. This is known as autoscaling. Behind the scenes, the web apps
are hosted on virtual machines running IIS. Autoscaling means adding more load
balanced virtual machines to host the web apps.
References:
adaniel89

This question came out during the exam - 13/2/21 Scored 880, this site helped me alot. But
please learn the definitions, acronyms of each feature because not all the questions here will
actually be on the test. Good luck!
upvoted 25 times
Kuljenny0
1 month, 1 week ago

Thanks alot Did most of the questions come out
upvoted 1 times
Mahesh_Nagar

Q#23 is same question but different answer. It is creating confusion
upvoted 20 times
trevax
2 months ago
Q#23 is about an app, here it's about a web app !
upvoted 13 times
MIU
2 weeks, 4 days ago

In my opinion, "an app" and "a web app" are regarded as the same...
upvoted 2 times
Franco11
1 week, 6 days ago

True it's the same. and here they are talking about RAM, different tiers give you different
storage. the answer is NO
upvoted 1 times
SecaWa5997
4 weeks ago
This is totally confusing, Microsoft is mixing the terminology themselves as well:
https://docs.microsoft.com/en-us/azure/app-service/app-service-plan-manage
upvoted 1 times
ElectroGio

That is true, thank you for the advice.
upvoted 1 times
propanther

This is a WebApps question and not PaaS question. Azure App Services takes advantage of PaaS
enviornment. https://docs.microsoft.com/en-us/learn/modules/azure-compute-
fundamentals/azure-app-services
upvoted 1 times
Gerardo1971
2 weeks, 3 days ago

Correct answer
upvoted 1 times
Iamrandom

I think B is wrong. You cannot change memory sizing (i.e. RAM) in Apps. There are tiers for
storage, yes, but that's not "memory", please learn the difference.
upvoted 6 times
scravas
3 weeks, 1 day ago

Apparently you misread, because, as 'trevax' said a week before your comment, this question is
about web apps, not apps. Your comment would be meaningful in question 23, which
specifically mentions apps and not web apps. Q23's answer coincides with what you said in this
comment.
upvoted 2 times
Nekerobert

Question #31 is about Web Apps while Question #23 is just about Apps. Kindly take note of the
difference.
upvoted 2 times
clementnduonyi

Can one explain what the difference is between web app and just "apps"? For me I thinks when
"apps", it should include web and every other app. So the answer should be same for both
questions. I stand to be corrected.
upvoted 5 times
km_cloud
2 months ago
paas include the OS and Dev tool kit, DB, BA - so why the first is NO?
upvoted 1 times
Anon6606
1 month, 1 week ago

mate full control if im not mistaken is (IAAS) in reference to this question
upvoted 1 times
XmXprt
2 months ago
It provides control of apps and not operating system.
upvoted 1 times
NareshNK
2 months ago
So the Answer is RAM can be increased with Pricing Tier.
upvoted 1 times
AnandRai
2 months ago
This is Correct Answer, Please correct answer of same question asked previously.
upvoted 1 times
Socca
2 months ago
This is correct
upvoted 1 times
Calimark

I believe this to be correct over 23. https://azure.microsoft.com/en-us/pricing/details/app-
service/windows/ Clearly shows memory comes with higher pricing tier
upvoted 8 times
panal

Correct
upvoted 6 times
Question #32Topic 1
Solution: You create an Azure virtual machines, Azure SQL databases, and Azure
Storage accounts.
• A. Yes
• B. No
Correct Answer: B
Platform as a service (PaaS) is a complete development and deployment environment
in the cloud. PaaS includes infrastructure ‫ג‬€" servers, storage, and networking ‫ג‬€" but
also middleware, development tools, business intelligence (BI) services, database
management systems, and more. PaaS is designed to support the complete web
application lifecycle: building, testing, deploying, managing, and updating.
However, virtual machines are examples of Infrastructure as a service (IaaS). IaaS is an
instant computing infrastructure, provisioned and managed over the internet.
References:
Sandy14nove

Azure VM and storage account is Iaas service so answer is B only
upvoted 10 times
toniiiy
2 weeks, 1 day ago

I think the Azure storage account is PaaS, based on the previous question
upvoted 2 times
Ycombo

There are ambiguous things written here, if PAAS is runtime or middleware then IAAS is
Virtualization, Servers, Network, Storage. This line is confusing. " PaaS includes infrastructure ‫ג‬€"
servers, storage, and networking"
upvoted 1 times
SunilBudhwani
2 weeks, 3 days ago

For PaaS we don't create VMs. VMs we create when we need complete control on OS. For PaaS
cloud provider is responsible which filter out VMs.
upvoted 1 times
AZSant87
4 weeks, 1 day ago
The answer is 'Yes' Platform as a service (PaaS) is a complete development and deployment
environment in the cloud. PaaS includes infrastructure—servers, storage, and networking—but
also middleware, development tools, business intelligence (BI) services, database management
systems, and more. PaaS is designed to support the complete web application lifecycle: building,
testing, deploying, managing, and updating. Reference: https://azure.microsoft.com/en-
us/overview/what-is-paas/
upvoted 1 times
stainboy
2 weeks ago
from the reference you can see what needs to be there BUT it is nor part of the solution offering.
In PaaS you don't manage the VMs. Nor in SaaS, although, as part of the infratructure (not IaaS),
they will be there. Same goes for Storage Accounts which fall under IaaS although you'll be
using storage in PaaS and SaaS.
upvoted 1 times
rptcs

why its No?? PaaS can't be achieved w/o having IaaS first. Please correct me
upvoted 1 times
CodePoet
2 months ago
The answer is no, in PAAS solution, the cloud provider handles the underlying infra requirements
and control.
upvoted 1 times
edejong
2 months ago
I agree Azure VM and storage account are in the IaaS bucket, but isn't IaaS a subset of PaaS,
which would make the answer = Yes?
upvoted 2 times
freshmaker

answer is B. you dont create Azure VM, SQL and storage: provider does it for you. PAAS is used
by developers.
upvoted 2 times
freshmaker

sorry, Answer should be Yes. see question 8.
upvoted 2 times
panal

Correct
upvoted 2 times
YSMS

I have the same question with Floris, I though PAAS = IAAS + Runtime + Middleware + OS, can
someone explain this?
upvoted 1 times
FlorisV

Direct link here https://docs.microsoft.com/en-us/learn/azure-fundamentals/intro-to-azure-
fundamentals/media/shared-responsibility.png
upvoted 1 times
FlorisV

Looking at the chart, isn't PAAS equal to IAAS +3 extra layers of service?
https://docs.microsoft.com/en-us/learn/modules/intro-to-azure-fundamentals/what-is-cloud-
computing
upvoted 2 times
Question #33Topic 1
Your company plans to deploy several custom applications to Azure. The applications
will provide invoicing services to the customers of the company. Each application will
have several prerequisite applications and services installed.
You need to recommend a cloud deployment solution for all the applications.
What should you recommend?
• A. Software as a Service (SaaS)

• B. Platform as a Service (PaaS)
• C. Infrastructure as a Service (laaS)
Correct Answer: C
Infrastructure as a service (IaaS) is an instant computing infrastructure, provisioned and
managed over the internet. The IaaS service provider manages the infrastructure, while
you purchase, install, configure, and manage your own software
Incorrect Answers:
A: Software as a service (SaaS) allows users to connect to and use cloud-based apps
over the Internet. Common examples are email, calendaring, and office tools. In this
scenario, you need to run your own apps, and therefore require an infrastructure.
B:
Platform as a service (PaaS) is a complete development and deployment environment
in the cloud. PaaS includes infrastructure‫ג‬€"servers, storage, and networking‫ג‬€"but also
middleware, development tools, business intelligence (BI) services, database
management systems, and more. PaaS is designed to support the complete web
application lifecycle: building, testing, deploying, managing, and updating.
References:
https://azure.microsoft.com/en-us/overview/what-is-saas/
skb1996

custom app in first-line tells that it can,t be SaaS. Multiple installations in last line of the
question tells that its can't be PaaS. In pAAS , u dont install stuff, only application files and data
are to be given in Paas. option left IaaS.
upvoted 59 times
Cloudmaheshb
11 months ago
Ans is IaaS.
upvoted 2 times
azure22
Highly Voted 1 year ago
I believe it should be PaaS, Can someone please confirm. My exam is in 3 days.
upvoted 31 times
Nilzuka

People, do not be fooled. The customs applications mentioned here required prerequisite
applications and services. The answer would be we what azure22 said if it was not for those. The
answer is 100% IAAS.
upvoted 34 times
Valavan
1 year ago
Its IAAS as its in-house developed app
upvoted 6 times
AzureDude
1 year ago
You can have in-house apps using PaaS. You just own the app and the data, the rest is taken
care of. I don’t see any requirement for managing the infrastructure/VMs, so PaaS is what I’m
going with.
upvoted 8 times
rolteame

I believe the answer is IaaS because of the condition of each app having its own prerequisites
upvoted 2 times
RoyLightstone
1 year ago
Hi, I also believe its PaaS. "custom applications" I believe, is the key word there...Good Luck
upvoted 4 times
Maemo
1 year ago
I also thought it was PaaS. I think it has something to do with the prerequisite services that will
need to be installed.
upvoted 3 times
runMarcao

I go with IaaS, it says "several prerequisite applications and services". You can't have that in PaaS
upvoted 1 times
Gerardo1971
2 weeks, 3 days ago

Correct answer
upvoted 1 times
mahi83
1 month, 1 week ago

Why not pass? Every app has pre requirements and can be fulfilled with every instance of app.
Also same goes for services.
upvoted 1 times
Diezvai
1 month, 1 week ago

upvoted 1 times
Dibabas

Its C, because its a custom app
upvoted 1 times
Sheduic7720
2 months ago
I think the Answer is correct as they will need to install custom applications and they will get this
option in IAAS only, as they will need more control for installing whatever application will be
needed
upvoted 1 times
werbinich
2 months ago
"Each application will have several prerequisite applications and services installed." Just ask
yourself can you do the above in PaaS ? you'll get the answer...
upvoted 3 times
Dineshvishe

What does the questions say "Each application will have several prerequisite applications and
services installed.". Can you install pre-requsite and services on PaaS or SaaS - No. But in IaaS
platform like Azure VM , you can install pre-requisite and services . So the answer is IaaS.
upvoted 2 times
AnthonyIOT
3 months ago
Its IaaS.
upvoted 1 times
panal
3 months ago
Correct Answer is IaaS
upvoted 2 times
Franco11

Custom Applications is PaaS of course
upvoted 1 times
Azurite
Had several easy questions to identify Iaas, Paas and Saas on Jan 24, 2021 exam
upvoted 1 times
kenedruc

Since "Each application will have several prerequisite applications and services installed," you
require more granular control of your environment here along with the dependencies.
Therefore, IaaS is the recommended best practice for this scenario.
upvoted 2 times
Minut
8 months ago
Hey could someone confirm the ans
upvoted 2 times
salehz

(laaS) is CORRECT here because the answer is in the last sentence "Each application will have
several prerequisite applications and services installed". With PaaS, you don't need to install any
prerequisite application, you are provided with the environment for your DevOps, with IaaS, you
have more control of your installed apps.
upvoted 7 times
haykaybam

Given answer IAAS is correct. From the question keyword is that you will require to install your
prerequisite applications and services for the custom application to work. This is not an idea of
PAAS.
upvoted 8 times
Question #34Topic 1
HOTSPOT -
select No.
Hot Area:
Correct
Answer:
Box 1: No -
Building a data center infrastructure is capital expenditure, not operation expenditure.
Box 2: Yes -
OpEx is ongoing costs (costs of operations) such as staff salaries.
Box 2: Yes -
OpEx is ongoing costs (costs of operations) such as leasing software. If you purchased
software as a one-off purchase, that would be CapEx, but leasing software is ongoing
so it‫ג‬€™s OpEx.
t213

upvoted 2 times
Gerardo1971
2 weeks, 3 days ago

Correct answer
upvoted 2 times
yevgen91
1 month ago
Leasing software is OpEx - https://k21academy.com/microsoft-azure/az-900/az-900-microsoft-
azure-fundamentals-cloud-computing-capex-vs-opex-model/
upvoted 1 times
aeai
1 month, 1 week ago

Capex is applicable to purchased assets which is amortized or depreciated. Salary is not
purchased assets but ongoing expense hence Opex.
upvoted 3 times
Mmontesm
1 month, 1 week ago

Solución provided is rigth. Examples of CAPEX include physical assets, such as buildings,
equipment, machinery, and vehicles. Examples of OPEX include employee salaries, rent, utilities,
property taxes, and cost of goods sold (COGS). Leasing is a way to move Capex to Opex
upvoted 1 times
amartinez1987
1 month, 1 week ago
the answerd is yes, no, no, in the second question is not because is a personal tecnical, you pay
for salary.
upvoted 1 times
johnyjohny1
1 month ago
Stop the disinformation, your answer makes no sense. Building data centers is CAPEX, the rest
are operational.
upvoted 3 times
Pamban
4 weeks ago
sorry mate, you are completely out of Capex and Opex concepts. the answer is 100% correct and
your answer is incorrect
upvoted 2 times
Note33

Box 2 should be no. When we not use the service we still need to pay for the salary of staff guy.
upvoted 1 times
clementnduonyi

No Yes No. The last statement talks about leasing a software which implies an upfront payment
and so it is a CapEx cost. My take.
upvoted 1 times
Kuljenny0
1 month, 1 week ago

Try and understand the meaning of leasing then you can apply it
upvoted 1 times
Jabs777
The given answer is correct N Y Y
upvoted 4 times
Jai2301
2 months ago
No YEs No
upvoted 2 times
mlaus

Can you plz argument why do you think that?
upvoted 1 times
Question #35Topic 1
HOTSPOT -
Hot Area:
Correct
Answer:
Azure Cosmos DB is an example of a platform as a service (PaaS) cloud database
provider.
Reference:
https://docs.microsoft.com/en-us/azure/cosmos-db/database-security
Gerardo1971
2 weeks, 3 days ago

Correct answer
upvoted 2 times
Diezvai
1 month, 1 week ago

upvoted 2 times
pigandarias
1 month, 1 week ago

upvoted 2 times
freshmaker

Azure Database services: Azure Cosmos DB, Azure SQL DB and Azure DB Migration. clue: any DB
services that starts with Azure.
upvoted 1 times
Shirkey

First line says "Azure Cosmos DB is a fully managed platform-as-a-service (PaaS)"
https://docs.microsoft.com/en-us/azure/cosmos-db/account-databases-containers-items
upvoted 4 times
panal

Correct
upvoted 4 times
aws_fanboy

https://docs.microsoft.com/en-us/azure/cosmos-db/serverless
upvoted 2 times
Voytek
2 weeks, 4 days ago

Misleading. Link doesn't exist.
upvoted 2 times
Question #36Topic 1
HOTSPOT -
select No.
Hot Area:
Correct
Answer:
Reference:
https://azure.microsoft.com/en-us/overview/what-is-saas/
Lipseal
2 days, 2 hours ago

I passed exam (May 2021) - Is Azure Backup PaaS? This question was on the exam
upvoted 1 times
rich2508
1 week, 5 days ago

https://azure.microsoft.com/en-au/blog/azure-backup-cloud-first-architecture/ Azure Backup is
architected from the ground-up as a first-class PaaS service in Azure
upvoted 2 times
mabotega
1 week, 5 days ago

Coorect answers: No, Yes, Yes Backup is PaaS - https://azure.microsoft.com/pt-br/blog/azure-
backup-cloud-first-architecture/ Azure Backup is architected from the ground-up as a first-class
PaaS service in Azure as described in approach 3 and delivers on the cloud promises customers
expect as they cloud transform their IT infrastructure.
upvoted 1 times
Felipe_apr
1 week, 5 days ago
Correct. "Azure Backup is architected from the ground-up as a first-class PaaS service in Azure"
https://azure.microsoft.com/en-us/blog/azure-backup-cloud-first-
architecture/#:~:text=Azure%20Backup%20is%20architected%20from,cloud%20transform%20th
eir%20IT%20infrastructure.
upvoted 1 times
Franco11
1 week, 5 days ago

Azure Backup Is a complete Solution SaaS
upvoted 1 times
AVP_Riga
1 week, 6 days ago

Why Azure Backup is PaaS? It looks like complete solution... like a SaaS
upvoted 2 times
lalit10
2 weeks, 1 day ago

Correct Answer.
upvoted 2 times
Question #37Topic 1
HOTSPOT -
select No.
Hot Area:
Correct
Answer:
Box 1: No -
Box 2: No -
Each resource can exist in only one resource group.
Box 3: Yes -
Resources from multiple different regions can be placed in a resource group. The
resource group only contains metadata about the resources it contains.
Reference:
https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-
overview https://www.codeisahighway.com/effective-ways-to-delete-resources-in-a-
resource-group-on-azure/
xenoc
5 days, 7 hours ago

upvoted 2 times
Moonfire
1 week, 1 day ago

Correct
upvoted 1 times
jamesf
2 weeks, 1 day ago

correct
upvoted 1 times
cindybriar
2 weeks, 1 day ago
correct answer
upvoted 2 times
Tony3i3
2 weeks, 2 days ago

Correct
upvoted 2 times
igreg
2 weeks, 2 days ago

correct
upvoted 3 times
Question #38Topic 1
HOTSPOT -
select No.
Hot Area:
Correct
Answer:
applications and data on your VMs. Availability Zones are unique physical locations
within an Azure region. Each zone is made up of one or more datacenters equipped
with independent power, cooling, and networking. To ensure resiliency, there are a
failures.
With Availability Zones, Azure offers industry best 99.99% VM uptime SLA. By
architecting your solutions to use replicated VMs in zones, you can protect your
applications and data from the loss of a datacenter. If one zone is compromised, then
replicated apps and data are instantly available in another zone.
References:
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/manage-availability
fspellet

Availability Zone: Unique physical locations within a region. Each zone is made up of one or
more datacenters equipped with independent power, cooling, and networking. So this is why
the third question is yes, because your data will likely be stored in more than one data center, so
if a data center goes down, it's highly likely another data center in the zone will have a backup
and will move the activity to that location. This is what they mean by "fault tolerance" as well.
upvoted 6 times
Gerardo1971

Correct answer
upvoted 2 times
ghassen007

correct
upvoted 3 times
panal

Correct
upvoted 2 times
Pinscher

Regarding the last question: "Managed disks support Availability Zones, which is a high-
availability offering that protects your applications from datacenter failures.". As it says supports
I guess it is an option and the answer is correct.
upvoted 1 times
Myname

Should the answer to no. 3 be No? It states 'managed disk' which means its the cloud provider's
responsibility to manage and the tenant cannot deploy that resource to any Availability Zone?
upvoted 2 times
Joe75

Should not those 3 be No. VM's and Disks are Zonal services and as such pinned to a zone.
upvoted 1 times
sinear
The idea of AZ is that you can duplicate your resources in each of them, taking advantage of the
other in case one fails. Same for VM's and disks.
upvoted 1 times
Ameet09

Answer seems correct. Here the link for more info https://docs.microsoft.com/en-
us/azure/availability-zones/az-overview
upvoted 1 times
Su_L

please remove my previous comment for this question as it has some non related comments:
Adding Answer Validations Links A. No confirmed answer: https://docs.microsoft.com/en-
us/azure/role-based-access-control/classic-administrators There can only be one Service
Administrator per Azure subscription B. Yes Do I need a Microsoft account to sign up for Azure?
You can sign up with your Microsoft account, or you can use your GitHub account and take your
code all the way from repositories to deployment. https://azure.microsoft.com/en-us/free/free-
account-faq C. No An Azure resource group cannot contain subscriptions.
https://social.msdn.microsoft.com/Forums/en-US/e4e54c00-60c2-4a79-af0c-5ad022b8097c/an-
azure-resource-group-contains-multiple-subscription-true-or-
false?forum=windowsazuremanagement
upvoted 4 times
fspellet

You may want to move this to the correct question, this isn't related to the availability zones
question.
upvoted 1 times
98090223

It should be for Q39
upvoted 2 times
Question #39Topic 1
HOTSPOT -
select No.
Hot Area:
Correct
Answer:
emi502

1. Yes - You can assign additional account administrators in the Azure Portal. 2. No - You need
an Azure Active Directory account to manage a subscription, not a Microsoft account. An
account is created in the Azure Active Directory when you create the subscription. Further
accounts can be created in the Azure Active Directory to manage the subscription 3. No.
Resource groups are logical containers for Azure resources. However, resource groups do not
contain subscriptions. Subscriptions contain resource groups. References:
https://docs.microsoft.com/en-us/office365/enterprise/subscriptions-licenses-accounts-and-
tenants-for-microsoft-cloud-offerings. It's the same question as Question 191
upvoted 54 times
toniiiy
2 weeks ago
(1) No Azure web: Coadministrators per subscription - Unlimited. However, I think the co-
administrators are not administrators.
upvoted 2 times
Tecatero2001

Account Administrator Limit = 1 per Azure account https://docs.microsoft.com/en-
us/azure/role-based-access-control/rbac-and-directory-admin-roles
upvoted 1 times
Arqueiro
2 weeks, 1 day ago

#2 is Yes https://docs.microsoft.com/en-us/dynamics-nav/how-to--sign-up-for-a-microsoft-
azure-subscription "To gain access to the Microsoft Azure management portal, you must have
an Azure subscription and a Microsoft account associated with that subscription"
upvoted 2 times
fspellet

1) No, an azure SUBSCRIPTION can only have one administrator. Azure portal is different. 2) Yes,
you have to have a microsoft account. As you later explain in your answer, you are creating a
microsoft account even if it's not originally one.
upvoted 5 times
Fire_Starter
1 month, 1 week ago

But the questions says "microsoft account only" which is incorrect because you need an AD
account
upvoted 3 times
Su_L

Adding Answer Validations Links A. No confirmed answer: https://docs.microsoft.com/en-
us/azure/role-based-access-control/classic-administrators There can only be one Service
Administrator per Azure subscription B. Yes Do I need a Microsoft account to sign up for Azure?
You can sign up with your Microsoft account, or you can use your GitHub account and take your
code all the way from repositories to deployment. https://azure.microsoft.com/en-us/free/free-
account-faq 1. Customer Account ID: 635786 2. Customer Company Name: Performance Health
3. Customer Contact Name:WILLIAMS, JOHN C. No An Azure resource group cannot contain
subscriptions. https://social.msdn.microsoft.com/Forums/en-US/e4e54c00-60c2-4a79-af0c-
5ad022b8097c/an-azure-resource-group-contains-multiple-subscription-true-or-
false?forum=windowsazuremanagement
upvoted 24 times
Dikkie
2 months ago
If you read further they actually say that you need a Microsoft Account: How does the signup
process work using GitHub? You can now sign up using the “Sign-in options” link on the Azure
sign-in page. When you, as a GitHub user, first sign into a Microsoft product with your
credentials, GitHub will ask for your permission to consent. GitHub will share with Microsoft the
name and public and private email addresses on your GitHub account to check if you already
have a Microsoft account. If it looks like you already have an account, you’ll have the option to
use that account and add your GitHub account as a login method. Otherwise, a new account will
be created and linked to the GitHub account.
upvoted 4 times
Dikkie
2 months ago
If it looks like you already have an account, you’ll have the option to use that account and add
your GitHub account as a login method. Otherwise, a new account will be created and linked to
the GitHub account.
upvoted 2 times
Joe75

A is now Yes. No, was valid for "classic administrators".
upvoted 7 times
SilkyS19

1. N0 -> There is only one Account Administrator per subscription.
https://docs.microsoft.com/en-us/azure/role-based-access-control/rbac-and-directory-admin-
roles
upvoted 1 times
lalit10
2 weeks, 1 day ago

Yes, No, No
upvoted 1 times
Tony99
3 weeks, 1 day ago

1.YES Access control A subscription is a deployment boundary for Azure resources. Every
subscription is associated with an Azure Active Directory tenant. Each tenant provides
"administrators" the ability to set granular access through defined roles by using Azure role-
based access control. When you design your subscription architecture, consider the deployment
boundary factor. For example, do you need separate subscriptions for development and for
production environments? With separate subscriptions, you can control access to each one
separately and isolate their resources from one another. https://docs.microsoft.com/en-
us/learn/modules/build-cloud-governance-strategy-azure/3-create-subscription-governance-
strategy
upvoted 2 times
szczepq
3 weeks, 4 days ago

There can only be one Service Administrator per Azure subscription. Changing the Service
Administrator will behave differently depending on whether the Account Administrator is a
Microsoft account or whether it is an Azure AD account (work or school account).
https://docs.microsoft.com/en-us/azure/role-based-access-control/classic-
administrators#limitations-for-changing-the-service-administrator 1. YES 2. NO
upvoted 1 times
adilkhan

No yes no is correct. You can have 1 Account Administrator and 1 Service Administrator, but you
can have 200 Co-Administrators per subscription.
upvoted 2 times
SnakePlissken

1. No - You can only have one account administrator in the classic Azure account structure. But I
wonder if this question is still on the exam. Microsoft recommends using the newer Azure RBAC
(role based access control). https://docs.microsoft.com/en-us/azure/role-based-access-
control/rbac-and-directory-admin-roles I have asked this question during an online training and
the MS rep replied "yes", but maybe she didn't think about classic Azure accounts, because the
link above shows that there's only one account administrator. With Azure RBAC, you can have
multiple administrators. By the way, I think that duplicate question 191 is removed by
ExamTopics.
upvoted 1 times
JayHymn

The answer is Yes, No, No. look at the last question on page which is the same as this question
but worded differently
upvoted 1 times
Moxi

Yes, No, No
upvoted 3 times
dzonek94

It should be NO, NO, NO
upvoted 8 times
J4U

No, No, No
upvoted 4 times
l0lat

A No. see table of Classic subscription administrator roles section
https://docs.microsoft.com/en-us/azure/role-based-access-control/rbac-and-directory-admin-
roles
upvoted 2 times
caklov

What about the co-admistrator? That ca be created so A should be NO?
upvoted 1 times
tzeyueny

A. Answer is No. https://docs.microsoft.com/en-us/azure/role-based-access-control/rbac-and-
directory-admin-roles
upvoted 1 times
Khella

As per the article there is only one account administrator for all subscriptions. Also we have only
service administrator for each subscription . So A - should be no https://docs.microsoft.com/en-
upvoted 3 times
Tanvirwq

Same question appears in as Q39 & Q191, surprisingly answer is different on both side.
upvoted 2 times
AdyArora

There is only one Account Administrator. This video explains it well -
https://www.youtube.com/watch?v=iAqltHSH-_o
upvoted 3 times
Deb2

A. Yes. To make a user an administrator of an Azure subscription, an existing administrator
assigns them the Owner role (an Azure role) at the subscription scope.
https://docs.microsoft.com/en-us/azure/cost-management-billing/manage/add-change-
subscription-administrator
upvoted 4 times
Question #40Topic 1
This question requires that you evaluate the underlined text to determine if it is correct.
An Azure region contains one or more data centers that are connected by using a low-
latency network.
Instructions: Review the underlined text. If it makes the statement correct, select ‫ג‬€No
change is needed‫ג‬€. If the statement is incorrect, select the answer choice that makes
the statement correct.
• A. No change is needed
• B. Is found in each country where Microsoft has a subsidiary office
• C. Can be found in every country in Europe and the Americas only
• D. Contains one or more data centers that are connected by using a high-latency network
Correct Answer: A
A region is a set of data centres deployed within a latency-defined perimeter and
connected through a dedicated regional low-latency network.
Microsoft Azure currently has 55 regions worldwide.
Regions are divided into Availability Zones. Availability Zones are physically separate
locations within an Azure region. Each Availability Zone is made up of one or more
datacenters equipped with independent power, cooling, and networking.
References:
https://azure.microsoft.com/en-gb/global-infrastructure/regions/
Guna

High-latency means slow connection
upvoted 43 times
cfptester
Highly Voted 1 year, 1 month ago

what is the highlighted text?
upvoted 12 times
Massy
3 months ago
"contains one or more data centers that are connected by using a low-latency network"
upvoted 2 times
Becker

A is Correct
upvoted 1 times
Gerardo1971
2 weeks, 3 days ago

Correct answer
upvoted 2 times
panal

Correct
upvoted 2 times
panal

A is correct
upvoted 1 times
Asifsomi
5 months ago
i often seen this option "No change is needed" what does that mean no change is needed?
upvoted 1 times
MIU
2 weeks, 3 days ago

"You can leave it".
upvoted 1 times
RAJSIL

Given sentence is correct.
upvoted 3 times
redfrog1668

A is correct.
upvoted 1 times
babufrik
9 months ago
A. Correct Low latency, High Availability, and Redundant Networkng Links
upvoted 3 times
Lengur_Bandar
9 months ago
Do you have answers after page 27. Its not opening for me
upvoted 1 times
CloudBoss

correct is A
upvoted 1 times
GervasioMontaNelas

Classic trick on D! Its A of course!
upvoted 1 times
S458855
11 months ago
you guys rocks! love ya.
upvoted 2 times
SagarShete
1 year ago
High latency is the trick work over here.. Correct answer A.
upvoted 2 times
JFH2K
1 year, 1 month ago

latency is an expression of how much time it takes for a data packet to travel from one point to
another.
upvoted 2 times
tpascal
1 year, 1 month ago

it is A
upvoted 2 times
1 year, 1 month ago

It makes sense that when Microsoft decides how to divide all it's data centres into regions, the
regions, like different subnets in a network, would have a good backbone between. Aka fast
internet (because obviously being far apart geographically communicate through internet, not
one long cable) or formally LOW latency. Think LATEtency like tendency to do something. LATE.
So if the tendency to be late is low, then it is fast ("it" = internet)
upvoted 5 times
WilsonShen
If it makes the statement correct => Select "No change is needed" ? B) Each country "microsoft
has a subsidiary" ? C) Every country in AMERICAS ( include South-America ? ) D) High-Latency ?
upvoted 2 times
Question #41Topic 1
HOTSPOT -
Hot Area:
Correct
Answer:
Azure automatically routes traffic between subnets in a virtual network. Therefore, all
virtual machines in a virtual network can connect to the other virtual machines in the
same virtual network. Even if the virtual machines are on separate subnets within the
virtual network, they can still communicate with each other.
To ensure that a virtual machine cannot connect to the other virtual machines, the
virtual machine must be deployed to a separate virtual network.
Reference:
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-udr-overview
Irgond07
2 weeks, 1 day ago

For me "be deployed to a separate resource group" is the correct answer! lets take an example,
what if more than one vm with named VM1 on same subnet/network. Default behavior is VMs
within the same network will communicate with each other. instated of creating new
subnet/network you create a resource group and you can differentiate the VMs with tag/OS or
different attributes and you can deny the traffic. so for me the answer should be "be deployed
to a separate resource group"
upvoted 1 times
Gerardo1971
2 weeks, 3 days ago

Correct answer
upvoted 3 times
LPatel

Once in a common network, they can connect. Hence, it's mandatory that the n/w is seprate.
upvoted 1 times
abhiwar

absolutely corresct
upvoted 1 times
panal

Correct
upvoted 2 times
abhinav123

yes correct
upvoted 2 times
Question #42Topic 1
HOTSPOT -
Hot Area:
Correct
Answer:
A resource group is a logical container for Azure resources. Resource groups make the
management of Azure resources easier.
With a resource group, you can allow a user to manage all resources in the resource
group, such as virtual machines, websites, and subnets. The permissions you apply to
the resource group apply to all resources contained in the resource group.
Reference:
https://docs.microsoft.com/en-us/azure/azure-resource-
manager/management/overview#resource-groups https://docs.microsoft.com/en-
us/azure/role-based-access-control/overview
Acredser

Is it not possible to use an ARM template for the same purpose? Or is that not possible? Even
though Azure Resource is the "better" option.
upvoted 5 times
BabieTee

the point is simultaneously. With templates it is affected only when the other vms is been
spinned. But with resource group , all permission is passed to all resources within the group at
same time.
upvoted 5 times
clevermantmnd
3 months ago
This is about permissions, not about VMs. So AZ Resource Group is the best answer. Moreoever,
with AZ Resource, you can only delegate permission to that specific resource, not several VMs.
upvoted 4 times
Gerardo1971

Correct answer
upvoted 2 times
StephenW
1 month, 1 week ago

Correct Answer A resource group can be used to scope access control for administrative actions.
To manage a resource group, you can assign Azure Policies, Azure roles, or resource locks.
upvoted 2 times
panal
3 months ago
Correct Answer
upvoted 4 times
Question #43Topic 1
You plan to deploy several Azure virtual machines.
You need to ensure that the services running on the virtual machines are available if a
single data center fails.
Solution: You deploy the virtual machines to two or more availability zones.
• A. Yes
• B. No
Correct Answer: A
applications and data on your VMs. An Availability Zone is a physically separate zone,
within an Azure region. There are three Availability Zones per supported Azure region.
Each Availability Zone has a distinct power source, network, and cooling. By
architecting your solutions to use replicated VMs in zones, you can protect your apps
and data from the loss of a datacenter. If one zone is compromised, then replicated
apps and data are instantly available in another zone.
Reference:
https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/availability
babufrik

A. Correct, because Availability Zones represent multiple Data Centers (up to 3) inside a Region,
so that if a DC fail, another DC supply the services in a HA environment
upvoted 11 times
Ahalu

Yes correct
upvoted 9 times
Gerardo1971

Correct answer
upvoted 1 times
bcih

correct
upvoted 1 times
panal
correct
upvoted 2 times
nigeldmgriffith

Yes ==> Availability zones provides the required fault tolerance because the zones are spread
across data centers based on the customer subscription.
upvoted 1 times
123456vlad
4 months ago
it is B. Unique physical locations within a region. Each zone is made up of one or more
datacenters equipped with independent power, cooling, and networking. It it has only one, at it
fails?
upvoted 1 times
AshokRao

A single AZ would suffice. Do not need 2 or more AZs
upvoted 1 times
CloudBoss

correct is A
upvoted 1 times
KhatriRocks

Answer is correct
upvoted 2 times
omaderemi

Yes is very correct
upvoted 2 times
trevy

Availability Zone Unique physical locations within a region. Each zone is made up of one or
more datacenters equipped with independent power, cooling, and networking.
upvoted 1 times
Cloudyuga

correct Availability Zone satisfies given condition.
upvoted 1 times
auxy

I thought both answers were correct until I read a part of an article from MS. Therefore, A: is the
correct answer according to the article from the MS. See below. An Availability Zone in an Azure
region is a combination of a fault domain and an update domain. For example, if you create
three or more VMs across three zones in an Azure region, your VMs are effectively distributed
across three fault domains and three update domains. The Azure platform recognizes this
distribution across update domains to make sure that VMs in different zones are not updated at
the same time. https://www.examtopics.com/exams/microsoft/az-900/view/
upvoted 2 times
Bartman

Answer is correct, Availability Zones is high availability across DC (99.99% availability)
upvoted 2 times
rsebayang

Yes correct
upvoted 1 times
xNuno
1 year ago
A. Yes Availability Zone Unique physical locations within a region. Each zone is made up of one
or more datacenters equipped with independent power, cooling, and networking.
upvoted 2 times
Question #44Topic 1
One of the benefits of Azure SQL Data Warehouse is that high availability is built into
the platform.
• B. automatic scaling
• C. data compression
• D. versioning
Correct Answer: A
Azure Data Warehouse (now known as Azure Synapse Analytics) is a PaaS offering
from Microsoft. As with all PaaS services from Microsoft, SQL Data
Warehouse offers an availability SLA of 99.9%. Microsoft can offer 99.9% availability
because it has high availability features built into the platform.
References:
https://docs.microsoft.com/en-us/azure/sql-data-warehouse/sql-data-warehouse-
overview-faq
Plee

my answer is 'B' Azure SQL Datawarehouse is a cloud data warehouse for the enterprise. It's
characterized by high resiliency through automatic scaling.
upvoted 18 times
1 year, 1 month ago

It's DataWAREHOUSE. It's a data dump!! what are you scaling? You want to make the massive
sea of data highly available.
upvoted 20 times
Massy
3 months ago
Yes, a datawarehouse for BIG DATA Analysis
upvoted 3 times
kilowd
1 year, 1 month ago

Guarantee of 99.9% availability, as well as regulatory compliance built in, so you don’t need your
DBAs to take care of any of this, it’s all taken care of for you.
https://blog.pragmaticworks.com/azure-sql-data-warehouse-features-and-advantages
upvoted 4 times
kilowd
1 year, 1 month ago

Answer is A
upvoted 1 times
RSMCT2011

A https://docs.microsoft.com/en-us/azure/sql-database/sql-database-high-availability
upvoted 15 times
1 year, 1 month ago

Yes. This is the key: " The high availability solution is designed to ensure that committed data is
never lost due to failures " The whole idea of 'high availability'
upvoted 20 times
bantu_1

This is for database now warehouse
upvoted 4 times
Becker
Yes, A is the Correct ANSWER
upvoted 1 times
akash_maxmunus
3 days, 2 hours ago

The information shared above is highly appreciated. You have shared your immense knowledge
of Azure-SQL Data Warehouse Training with us. Your article inspires most people to learn this. If
anyone keen to learn this course kindly reaches us. MaxMunus offers the best Azure-SQL-Data-
Warehouse-Training training across the globe. We have a highly experienced trainer for all
courses. For details kindly connect :- <a href="https://www.maxmunus.com/page/Azure-SQL-
Data-Warehouse-Training"> Azure-SQL-Data-Warehouse-Training </a>
upvoted 1 times
Gerardo1971
2 weeks, 3 days ago

Correct answer
upvoted 2 times
hercu

Correct answer is A. “High availability for Azure Synapse Analytics One of the key benefits of a
modern cloud-based infrastructure such as Microsoft Azure is that features for high availability
(HA) and disaster recovery (DR) are built in and simple to implement and customize.”
References: https://docs.microsoft.com/en-us/azure/cloud-adoption-framework/migrate/azure-
best-practices/analytics/azure-synapse
upvoted 3 times
panal
3 months ago
A is correct.
upvoted 2 times
Joe75

are we confusing HA with Scalability. The statement discusses HA which is built-in.
upvoted 1 times
murat12345

Every resource has high availability... why makes it so special in the case of a dwh?
upvoted 1 times
murat12345

Because high availability is standard for Cloud
upvoted 1 times
manyb2ns

A is correct. SQL Data Warehouse offers guaranteed 99.9 percent availability
https://www.azure.cn/en-us/pricing/details/sql-data-warehouse/ (option) You can scale out or
scale back compute by adjusting the data warehouse units setting for your dedicated SQL pool
(formerly SQL DW). https://docs.microsoft.com/en-us/azure/synapse-analytics/sql-data-
warehouse/sql-data-warehouse-manage-compute-overview#scaling-compute
upvoted 1 times
nigeldmgriffith

A ==> High availability is implemented using a technology similar to SQL Server Always On
availability groups. The cluster includes a single primary replica that is accessible for read-write
customer workloads, and up to three secondary replicas (compute and storage) containing
copies of data. https://docs.microsoft.com/en-us/azure/azure-sql/database/high-availability-
sla#:~:text=High%20availability%20is%20implemented%20using,storage)%20containing%20cop
ies%20of%20data.
upvoted 1 times
Brouhaha

Well, DW is dead , long live Synaptics insight. So this question is from the old exam. Anyway it's
tricky. SLA for SQL database is 99,995% so High availability here. But SLA fot AZ Synaptics is 99,
9% which is I still considered high availability. There is no definition of what % is high availability
, so I would consider A valid even for Synaptics.
upvoted 1 times
Vineet2107

Question says ""One of the benefits"" of Azure SQL Data Warehouse is that high availability is
built into the platform. which stands TRUE.. so no No change in statement is required. Aswer
should be "A"
upvoted 2 times
nguyenhung1121990
5 months ago
Correct Answer(s): Automatic Scaling Automatic Scaling is CORRECT because it is one of the
features and benefits of Azure SQL Data Warehouse. Now this service is called as “Azure
Synapse”. It also has other features like: Unified Experience, Powerful Insights, Security and
Clarity. Azure Synapse is an analytics service that is used for enterprise data warehousing and
Big Data analytics. “No change is needed” is INCORRECT because “high availability” is not one of
the benefits of Azure SQL Datawarehouse. Data compression is INCORRECT because it is not
one of the benefits of Azure SQL Datawarehouse.
upvoted 1 times
Srivathsan
5 months ago
Here we are looking into the Synapse(formerly SQL DW). It means data is less frequently
accessed and not many people access. So, auto scaling could actually be an additional feature
that could be requested for, but not a built-in feature. But High Availability and Disaster
Recovery are built-in and important features for DW. Hence, for this question, answer should "A.
No change required" because HA is the correct answer. Built-in: https://docs.microsoft.com/en-
us/azure/cloud-adoption-framework/migrate/azure-best-practices/analytics/azure-synapse
Configurations can be changed: https://docs.microsoft.com/en-us/azure/synapse-analytics/sql-
data-warehouse/sql-data-warehouse-manage-compute-overview
upvoted 2 times
Alvaroll

It's B https://docs.microsoft.com/en-us/azure/synapse-analytics/sql-data-warehouse/sql-data-
warehouse-manage-compute-overview#automating-compute-management
upvoted 1 times
YTanako

It's not built in tho. I agree with theRunner. His documentation about HA of Azure Synapse
made the most sense
upvoted 1 times
theRunner

I agree, HA is built into Azure Synapse: https://docs.microsoft.com/en-us/azure/cloud-adoption-
framework/migrate/azure-best-practices/analytics/azure-synapse
upvoted 4 times
Question #45Topic 1
Solution: You deploy the virtual machines to two or more regions.
• A. Yes
• B. No
Correct Answer: A
By deploying the virtual machines to two or more regions, you are deploying the virtual
machines to multiple datacenters. This will ensure that the services running on the
virtual machines are available if a single data center fails.
Azure operates in multiple datacenters around the world. These datacenters are
grouped in to geographic regions, giving you flexibility in choosing where to build your
applications.
You create Azure resources in defined geographic regions like 'West US', 'North
Europe', or 'Southeast Asia'. You can review the list of regions and their locations.
Within each region, multiple datacenters exist to provide for redundancy and availability.
Reference:
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/regions
Thyfere

Services are being discussed. Not all regions offer the same services; therefore, answer is B
upvoted 32 times
MIU
2 weeks, 3 days ago

>You plan to deploy several Azure virtual machines. This is just a simple case for "Deploying
Azure virtual machines". Any region has this fundamental function....So the answer is "Yes".
upvoted 3 times
fspellet

"You need to ensure that the services running on the virtual machines are available if a single
data center fails." This sentence implies that while you're setting up the service, the regions you
have chosen already have the services you need. Regardless if all regions offer the same
services, you wouldn't use 2 regions that didn't have all the services available to you, thus
making the question irrelevant if that was the case.
upvoted 3 times
alisag09

if the region did not offer a particular service, you anyway cannot create a resource. isn't it?
upvoted 3 times
Amit0807

But the solution says you have deployed it in multiple regions hence it can be assumed that the
services were available in other regions
upvoted 25 times
Bond

i think what is required is best possible answer.. regions are NOT primarily designed for fault
tolerance.
upvoted 29 times
shishal
7 months ago
We may be overdoing it but regardless it meets the goal. May not be very cost effective or
performant but that's not the goal here.
upvoted 2 times
ukkuru

Why do we need multiple regions? Cant, we manage with availability zones. As per my
understanding, we can have more than one data center under an availability zone. So I believe
the answer should be No.
upvoted 2 times
xlj
4 days, 2 hours ago

The answer should be YES. Reason: Availability zone suits more don't mean Azure Region cannot
do the job. Imagine you use the availability zone, you are actually using Azure Region behind
the scene already. Since Availability zones belong to Azure Regions.
upvoted 1 times
Franco11
1 week, 5 days ago

Deploying VM to another region will solve the issue but it's not the best solution
upvoted 1 times
Gerardo1971
2 weeks, 3 days ago

Correct answer
upvoted 1 times
SimonR2
1 month, 1 week ago
This is asking to see if you understand about virtual machine high availability. This includes Fault
tolerance and disaster recovery to help ensure VM availability. Fault tolerance = "Availability
zones" on the data centre level. Disaster recovery = "Region pairing" on the region level. Answer
is Yes
upvoted 5 times
Min_Thu

Can anyone explain why need to deploy the virtual machines to two or more regions? We can
deploy virtual machine to two or more availability zone.
upvoted 2 times
MIU
2 weeks, 3 days ago

This is just a question for Exam. I think this situation doesn't actually happen, but they are asking
if we understand the logic or not.
upvoted 1 times
ckray
4 weeks ago
not every region supports availability zones..so ARs.
upvoted 1 times
panal

The Correct Answer is A:YES https://docs.microsoft.com/en-us/learn/modules/azure-
architecture-fundamentals/regions-availability-zones
upvoted 2 times
al

question is vague to say the least. the objective/goal is to "deploy VMs" and "ensure Services
running on those VMs remain available" but it doesn't state what the services are, so yes it could
be additional Azure services that are deployed via VM and as said by some not all services are
available in all regions. But it could also be inhouse produced services that have no reliance on
additional Azure services. so without clarity in my opinion both answers meet the objective. That
said MS exams always want you to focus on "the best" Solution or the "recommended
configuration" which in this case here would be Availability zones.
upvoted 2 times
nigeldmgriffith

Yes ==> Being deployed across multiple regions is correct although more costly than across
availability zones within the same region.
upvoted 2 times
Ansgar

I do not understand it, when you assign it to two reasons it is even better than in 2 availability
zones.
upvoted 1 times
Namewasnicked
4 months ago
Again. this is not about understanding but about what MS wants to promote. I would prefer
them to be more honest in their questiosn by addeing: whats is best solution or recommended
solution. Would solve a lot of discussion
upvoted 3 times
NassimAissi

the correct answer is A
upvoted 2 times
nrajesh17

There are 3 availability zones per supported Azure Region. Hence answer is A - "Yes"
upvoted 1 times
Kirtesh
I think, Answer should be Yes. https://docs.microsoft.com/en-us/azure/virtual-machines/regions
upvoted 2 times
Jegababu

I feel answer should be Yes. We have a concept called Region pair in Azure, Does it not support
this solution?? https://docs.microsoft.com/en-us/learn/modules/azure-architecture-
fundamentals/regions-availability-zones
upvoted 1 times
Shib1982

It should be Yes
upvoted 1 times
Question #46Topic 1
HOTSPOT -
select No.
Hot Area:
Correct
Answer:
Box 1: No -
A resource can interact with resources in other resource groups.
Box 2: Yes -
Deleting the resource group will remove the resource group as well as all the resources
in that resource group. This can be useful for the management of resources. For
example, a virtual machine has several components (the VM itself, virtual disks, network
adapter etc.). By placing the VM in its own resource group, you can delete the VM along
with all its associated components by deleting the resource group.
Another example is when creating a test environment. You could place the entire test
environment (Network components, virtual machines etc.) in one resource group. You
can then delete the entire test environment by deleting the resource group.
Box 3: Yes -
Resources from multiple different regions can be placed in a resource group. The
resource group only contains metadata about the resources it contains.
References:
overview https://www.codeisahighway.com/effective-ways-to-delete-resources-in-a-
resource-group-on-azure/
success101

No, Yes, Yes
upvoted 32 times
sbettani

Last question's link doesn't work, you can find documentation here
https://docs.microsoft.com/en-us/azure/cloud-adoption-framework/decision-guides/regions/
"Azure resource groups are regional specific constructs. It is normal, however, for resources
within a resource group to span multiple regions. When doing so, it is important to consider
that in the event of a regional failure, control plane operations against a resource group will fail
in the affected region, even though the resources in other regions (within that resource group)
will continue to operate. This can affect both your network design and your resource group
design."
upvoted 18 times
xenoc

upvoted 2 times
t213

Exam question 08-05-2021
upvoted 3 times
Gerardo1971
2 weeks, 2 days ago

Correct answer
upvoted 1 times
shtingdcknipples
1 month, 1 week ago

NO, YES, YES
upvoted 2 times
LPatel

No, Yes, Yes
upvoted 1 times
eagle_413

All correct. https://docs.microsoft.com/en-us/azure/azure-resource-
manager/management/overview
upvoted 2 times
panal

No, Yes, Yes https://docs.microsoft.com/fr-fr/azure/azure-resource-
manager/management/overview
upvoted 2 times
SarathJD

No,Yes,Yes
upvoted 1 times
amandass
6 months ago
No, yes, yes
upvoted 1 times
MSOffice

Box 1: No A resource can interact with resources in other resource groups. Box 2: Yes Deleting
the resource group will remove the resource group as well as all the resources in that resource
group. This can be useful for the management of resources. For example, a virtual machine has
several components (the VM itself, virtual disks, network adapter etc.). By placing the VM in its
own resource group, you can delete the VM along with all its associated components by
deleting the resource group. Another example is when creating a test environment. You could
place the entire test environment (Network components, virtual machines etc.) in one resource
group. You can then delete the entire test environment by deleting the resource group. Box 3:
Yes Resources from multiple different regions can be placed in a resource group. The resource
group only contains metadata about the resources it contains. References:
https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-overview
https://www.codeisahighway.com/effective-ways-to-delete-resources-in-a-resource-group-on-
azure/
upvoted 5 times
Anuja1

correct
upvoted 2 times
AP02

No,Yes, Yes. For question B as per MS Doc: When you delete a resource group, Resource
Manager determines the order to delete resources. It uses the following order: All the child
(nested) resources are deleted. Resources that manage other resources are deleted next. A
resource can have the managedBy property set to indicate that a different resource manages it.
When this property is set, the resource that manages the other resource is deleted before the
other resources. The remaining resources are deleted after the previous two categories. After the
order is determined, Resource Manager issues a DELETE operation for each resource. It waits for
any dependencies to finish before proceeding.
upvoted 2 times
Alicezhang

Got this in my exam
upvoted 1 times
samtguy2020
9 months ago
Correct to last questions: https://docs.microsoft.com/en-us/azure/azure-resource-
manager/management/overview "A resource group can contain resources that are located in
different regions."
upvoted 1 times
samtguy2020
9 months ago
Correct link for last questions: https://www.codeisahighway.com/effective-ways-to-delete-
resources-in-a-resource-group-on-azure/
upvoted 2 times
Question #47Topic 1
You plan to store 20 TB of data in Azure. The data will be accessed infrequently and
visualized by using Microsoft Power BI.
You need to recommend a storage solution for the data.
Which two solutions should you recommend? Each correct answer presents a complete
solution.
• A. Azure Data Lake

• B. Azure Cosmos DB
• C. Azure SQL Data Warehouse
• D. Azure SQL Database
• E. Azure Database for PostgreSQL
Correct Answer: AC
You can use Power BI to analyze and visualize data stored in Azure Data Lake and
Azure SQL Data Warehouse.
Azure Data Lake includes all of the capabilities required to make it easy for developers,
data scientists and analysts to store data of any size and shape and at any speed, and
do all types of processing and analytics across platforms and languages. It removes the
complexities of ingesting and storing all your data while making it faster to get up and
running with batch, streaming and interactive analytics. It also integrates seamlessly
with operational stores and data warehouses so that you can extend current data
applications.
References:
https://docs.microsoft.com/en-us/azure/data-lake-store/data-lake-store-power-bi
https://azure.microsoft.com/en-gb/solutions/data-lake/ https://docs.microsoft.com/en-
us/azure/data-lake-store/data-lake-store-power-bi
hfk2020

Azure SQL Data Warehouse is now Azure Synapse Analytics can you please change it in the
options.
upvoted 68 times
zorro1

Azure Data Lake integration features https://powerbi.microsoft.com/en-us/blog/power-bi-
dataflows-and-azure-data-lake-storage-gen2-integration-preview/ Azure SQL Data Warehouse
integration features https://powerbi.microsoft.com/en-us/integrations/azure-sql-data-
warehouse/
upvoted 44 times
HersNo
Most Recent 1 month, 3 weeks ago

good answers
upvoted 1 times
freshmaker

correct. Azure Synapse Analytics (formerly Azure SQL Data Warehouse) and Azure Data Lake.
upvoted 2 times
Sandy14nove

Correct
upvoted 1 times
panal
3 months ago
Correct
upvoted 2 times
Andytangcc

correct
upvoted 1 times
karimab

Correct
upvoted 1 times
Ebenezer
Azure SQL Data Warehouse and Azure Data Lake.
upvoted 2 times
Alex_22

Infrequently is the key.
upvoted 3 times
RashmiB

By default, Power BI installs an OLE DB driver for Azure SQL Data Warehouse. This could also be
the reason for Azure SQL Data Warehouse instead of Cosmos DB .
upvoted 3 times
Carmen_S

Thanks everyone for the useful comments. Just had my exam. This was was def on the test!
upvoted 7 times
lawcarvalho

In my point of view, the storage size is very important to respond this question. Postgress up to
16 TB: https://azure.microsoft.com/en-us/pricing/details/postgresql/server/ SQL DB up to 4 TB:
https://docs.microsoft.com/pt-br/azure/azure-sql/managed-instance/resource-limits
upvoted 15 times
abilioneto

correct
upvoted 1 times
adino13

Heads up: Azure SQL DW is no longer the appropriate name. It has been changed to Azure
Synapse Analytics
upvoted 40 times
Jhonsteve83
1 year ago
Correct
upvoted 2 times
Zurvan

Also infrequently is here the key. Otherwise Cosmos DB would have been the right answer.
upvoted 30 times
murat12345

What does infrequently has to do with azure dataware house and datalake? The datawarehouse
van be accesed as (in)frequently as the user wants.. The huge amount of data that is stored is
the key I think.
upvoted 8 times
1 year, 1 month ago

Out of the various storage solutions by Azure, only these two are designed as purely huge data
dumps for the most infrequent usage.
upvoted 26 times
murat12345

that is not true. A datawarehouse can be used very frequently. It is a place where the data is
combined and most of the times aggregated so the frontend can take data out of it when
needed.
upvoted 3 times
Question #48Topic 1
HOTSPOT -
You have an Azure environment that contains 10 web apps. To which URL should you
connect to manage all the Azure resources? To answer, select the appropriate options
in the answer area.
Hot Area:
Correct
Answer:
The Azure portal is a web-based management interface where you can view and
manage all your Azure resources in one unified hub, including web apps, databases,
virtual machines, virtual networks, storage and Visual Studio team projects.
The URL of the Azure portal is https://portal.azure.com.
References:
https://azure.microsoft.com/en-gb/features/azure-portal/
Vaibhavs

I hope now they dont ask which cloud platform exam you are writing ? Azure, AWS or GCP? ;-)
upvoted 24 times
JohnO1971
portal.azure.com
upvoted 24 times
Gerardo1971

Correct answer
upvoted 1 times
myskypeid1313
3 weeks, 2 days ago

That's one free point right there :D
upvoted 1 times
HersNo

correct
upvoted 1 times
panal
3 months ago
Portal.azure.com
upvoted 3 times
Angela4643

yup...got that one right...lol
upvoted 2 times
winston_45

portal.azure (without anything else) works as well in your browser :)
upvoted 1 times
Josh65

Portal.azure.com
upvoted 2 times
HaiLim
8 months ago
is a give away, if u do not know the answer for this, u shouldn't be here.. haha
upvoted 4 times
Vyew

https://portal.azure.com
upvoted 2 times
Jerecax
9 months ago
portal.azure.com
upvoted 1 times
CloudBoss

correct is portal.azure.com
upvoted 2 times
David_warrior
11 months ago
I see portal.azure.com gives sense but does this really relates to the question?
upvoted 3 times
Urpiano

The question says "To which URL should you connect to manage all the Azure resources?".
IMHO, the key is "Azure resources"; an App has public IP, storage account, etc.
upvoted 1 times
Cloudyuga

correct answer portal.azure.com
upvoted 1 times
hari89k

portal.azure.
upvoted 1 times
dlp_7
12 months ago
Yes. I don't think are others are valid options in any manner.
upvoted 2 times
Question #49Topic 1
You need to identify the type of failure for which an Azure Availability Zone can be used
to protect access to Azure services.
What should you identify?
• A. a physical server failure

• B. an Azure region failure
• C. a storage failure
• D. an Azure data center failure
Correct Answer: D
applications and data on your VMs. An Availability Zone is a physically separate zone,
within an Azure region. There are three Availability Zones per supported Azure region.
Each Availability Zone has a distinct power source, network, and cooling. By
architecting your solutions to use replicated VMs in zones, you can protect your apps
and data from the loss of a datacenter. If one zone is compromised, then replicated
apps and data are instantly available in another zone.
Reference:
https://docs.microsoft.com/en-us/azure/virtual-machines/availability

It seems that in these questions designed by Microsoft it always follows this thinking pattern:
Regions > Zones > Data Centre. When you see a question like this with the keyword Zone
AUTOMATICALLY you think protecting or managing data centers!
upvoted 56 times
RSMCT2011

Availability Zones is a high-availability offering that protects your applications and data from
datacenter failures. https://docs.microsoft.com/en-us/azure/availability-zones/az-overview
upvoted 37 times
Gerardo1971

Correct answer
upvoted 1 times
panal
3 months ago
Correct answer is D.
upvoted 2 times
woodmanhu

Is the relationship like this? Region > Zones > Data Centre > Physical Server > Storage like a
Data Centre contains multiple physical servers that contain many storages
upvoted 1 times
nigeldmgriffith

D ==> Availability zones is associated with protection from data center failures.
upvoted 1 times
ankuj

Data Center failure is correct one
upvoted 1 times
NaruAV

Data center failures. Ans D
upvoted 1 times
Ebenezer

The correct answer is D.
upvoted 1 times
lollo1234

A physical server and storage by definition is also placed inside a data center, and hence use of
Availability zones should overcome those failures as well. It seems that Microsoft words the
questions that point word to word to given definitions in the official definition
upvoted 1 times
F_Bastiat

MS Docs says that an Availability Zone = Unique physical locations within a region. Each zone is
made up of one or more datacenters equipped with independent power, cooling, and
networking. https://docs.microsoft.com/en-us/azure/availability-zones/az-overview So, if it
consists only of one Data Center, it cannot protect against Data Center failures, I would gravitate
more towards storage as that would be the next, lower level of protection.
upvoted 1 times
ElsaBBP
11 months ago
why not A? what service is used for the server failure? isn't it also Availability Zone?
upvoted 2 times
gordzilla
10 months ago
A server failure falls within VM resiliency, which is a managed feature of virtual machines on all
cloud provider platforms.
upvoted 3 times
Cloudyuga
11 months ago
given answer is correct ..D.datacenter failures.
upvoted 1 times
Shalini_Vish

Correct answer is D.
upvoted 3 times
SagarShete
1 year ago
There can be many data centre within an availability zone. Hence Correct Answer is D.
upvoted 1 times
tpascal
1 year, 1 month ago

It is D
upvoted 3 times
Nagesh2008btech
1 year, 1 month ago

what if availability zone contains only one data centre https://azure.microsoft.com/en-au/global-
infrastructure/availability-zones/
upvoted 3 times
Rooks
1 year ago
Availability zones must have at least 3 data centres...
upvoted 4 times
eddiemy

AZ must have 2 or more Data center, wont be have exceptional case.
upvoted 1 times
Piiri565

Avaialbility zone means region containing two or more datacentres
upvoted 6 times
Question #50Topic 1
HOTSPOT -
You plan to extend your company‫ג‬€™s network to Azure. The network contains a VPN
appliance that uses an IP address of 131.107.200.1.
You need to create an Azure resource that defines the VPN appliance in Azure.
Which Azure resource should you create? To answer, select the appropriate resource in
the answer area.
Hot Area:
Correct
Answer:
A Local Network Gateway is an object in Azure that represents your on-premise VPN
device. A Virtual Network Gateway is the VPN object at the Azure end of the
VPN. A ‫ג‬€˜connection‫ג‬€™ is what connects the Local Network Gateway an the Virtual
Network Gateway to bring up the VPN.
The local network gateway typically refers to your on-premises location. You give the
site a name by which Azure can refer to it, then specify the IP address of the on-
premises VPN device to which you will create a connection. You also specify the IP
address prefixes that will be routed through the VPN gateway to the VPN device. The
address prefixes you specify are the prefixes located on your on-premises network. If
your on-premises network changes or you need to change the public IP address for the
VPN device, you can easily update the values later.
References:
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-site-to-site-
resource-manager-portal
Ragnarok

Local network gateway is correct!
upvoted 11 times
xenoc

upvoted 2 times
t213

upvoted 1 times
Gerardo1971
2 weeks, 2 days ago

Correct answer
upvoted 1 times
sudaguna
3 weeks, 5 days ago

how many questions you need to make correct
upvoted 1 times
sudaguna
3 weeks, 5 days ago

any negative marks in this exam
upvoted 1 times
Hanz1234
3 weeks, 6 days ago

Why is Local Network Gateway and not Virtual Network Gateway?
upvoted 3 times
0byte
1 week, 4 days ago

Virtual Network Gateway is the service that facilitates VPN in Azure. A Local Network Gateway
represents a remote site your Azure VPN Gateway will connect to. There can be many local
network gateways configured on one VPN Gateway - aka many VPN connections terminating on
that VPN Gateway
upvoted 1 times
heatherz
3 weeks, 6 days ago
It says "an Azure resource that defines the VPN appliance". The local network gateway is a
specific object that represents your on-premises location (the site) for routing purposes
upvoted 8 times
shtingdcknipples
1 month, 1 week ago

upvoted 1 times
panal
3 months ago
upvoted 2 times
Joe75

https://docs.microsoft.com/en-us/azure/vpn-gateway/tutorial-site-to-site-portal
upvoted 2 times
fuddyduddy
1 day, 21 hours ago

Local network gateway is indeed correct. The local network gateway is a specific object that
represents your on-premises location (the site) for routing purposes:
https://docs.microsoft.com/en-us/azure/vpn-gateway/tutorial-site-to-site-
portal#LocalNetworkGateway
upvoted 1 times
Question #51Topic 1
Solution: You deploy the virtual machines to two or more resource groups.
• A. Yes
• B. No
Correct Answer: B
A resource group is a logical container for Azure resources. When you create a
resource group, you specify which location to create the resource group in.
However, when you create a virtual machine and place it in the resource group, the
virtual machine can still be in a different location (different datacenter).
Therefore, creating multiple resource groups, even if they are in separate datacenters
does not ensure that the services running on the virtual machines are available if a
References:
https://docs.microsoft.com/en-us/azure/azure-resource-
manager/management/overview#resource-groups
Fhanuti

Answer is B .. RG has nothing to do with High availability
upvoted 15 times
validdumpplz
Highly Voted11 months, 1 week ago

Need VMs in multiple datacenters or "Availability Zones"
upvoted 12 times
David_warrior
11 months ago
right!
upvoted 1 times
Gerardo1971

Correct answer
upvoted 1 times
Sheduic7720

the answer would be Availability Zone not Resource group
upvoted 1 times
panal
3 months ago
Correct Answer is B
upvoted 1 times
Enoll

You need to ensure that the services are available if a single data center fails - in this case you
need availability zones - they protect from datacenter failures. So the answer is NO - resource
groups have nothing to do with availability.
upvoted 3 times
Aala

Azure makes sure that the VMs you place within an Availability Set run across multiple physical
servers, compute racks, storage units, and network switches. If a hardware or software failure
happens, only a subset of your VMs are impacted and your overall solution stays operational.
Availability Sets are essential for building reliable cloud solutions Hence answer would be
Availability Set
upvoted 2 times
Neonlight8

The answer should be different AZ or Region with AZ, so its wrong
upvoted 2 times
Gelo29

I can't understand it's a YES/NO question.
upvoted 1 times
testexam123

Ans : D Question is : In which Azure support plans can you open a new support request? As per
micro documentation: https://docs.microsoft.com/en-us/azure/azure-portal/supportability/how-
to-create-azure-support-request support request mean support ticket. As per azure plan page :
https://azure.microsoft.com/en-us/support/plans/ see row "Ability to submit as many support
tickets as you need" is applicable from basic plan.
upvoted 1 times
Starlink
1 year ago
Answer is B
upvoted 2 times
Keshavjuyal
1 year ago
RG has nothing to do with High availability, its Fault Tolerance which can handle this situation iin
availability Zone
upvoted 5 times
tpascal
1 year, 1 month ago

It is B As adding more resources groups does not help if you prevent the datacenter failure
upvoted 2 times
Mrdata

This is the second time i come across this question, comments dont related to the question, and
the answer seems to be incorrect to me. So,, oops! Think something went wrong here!
upvoted 1 times
Mrdata
Answer is correct. Excuse me. The comments with answer D confused me.
upvoted 7 times
ArSung

The answer is D.Because All user can open a new support request
upvoted 4 times
ottootto

what is D?
upvoted 21 times
dodyagung

he just added option D for himself
upvoted 13 times
Question #52Topic 1
Solution: You deploy the virtual machines to a scale set.
• A. Yes
• B. No
Correct Answer: B
This answer does not specify that the scale set will be configured across multiple data
centers so this solution does not meet the goal.
Azure virtual machine scale sets let you create and manage a group of load balanced
VMs. The number of VM instances can automatically increase or decrease in response
to demand or a defined schedule. Scale sets provide high availability to your
applications, and allow you to centrally manage, configure, and update many VMs.
Virtual machines in a scale set can be deployed across multiple update domains and
fault domains to maximize availability and resilience to outages due to data center
outages, and planned or unplanned maintenance events.
Reference:
Socca

Correct answer is B .Scale set does not garanti availability if a DataCenter fails.
upvoted 6 times
panal

Correct
upvoted 5 times
mabotega

Correct answer is A - YES - According to the article published in 03/08/2021 at
https://docs.microsoft.com/en-us/azure/virtual-machines/availability Virtual machines in a scale
set can also be deployed into a single Availability zone, or regionally.
upvoted 1 times
Gerardo1971
2 weeks, 2 days ago

Correct answer
upvoted 1 times
mustaqueali

Answer A is Correct: https://docs.microsoft.com/en-us/azure/virtual-machine-scale-
sets/overview#differences-between-virtual-machines-and-scale-sets In this link, it clearly states
that "Automatic distribution of VM instances across Availability Zones or Availability Sets"
upvoted 3 times
Arqueiro
2 weeks, 1 day ago

I upvoted this answer but giving a second though the question indeed does not mention if the
scale set is configured across multiple DCs. The scale set will automatically deploy the VMs on
an availability zone OR availability set. Availability set does not help in case of a DC issue, and it
is not clear if there is an availability zone configured/available or not.
upvoted 1 times
Question #53Topic 1
HOTSPOT -
select No.
Hot Area:
Correct
Answer:
Box 1: No -
An Azure AD tenant can have multiple subscriptions but an Azure subscription can only
be associated with one Azure AD tenant.
Box 2: Yes -
Box 3: No -
If your subscription expires, you lose access to all the other resources associated with
the subscription. However, the Azure AD directory remains in Azure. You can associate
and manage the directory using a different Azure subscription.
References:
https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-
how-subscriptions-associated-directory
Ragnarok

-2 is yes. Here's the reference: https://docs.microsoft.com/en-us/azure/role-based-access-
control/transfer-subscription
upvoted 6 times
mohsensp

Its already selected yes
upvoted 2 times
panal
Correct Anwser
upvoted 5 times
Gerardo1971

Correct Anwser
upvoted 2 times
SugaRay
2 weeks, 3 days ago

One AD Tenant per Azure subscription
upvoted 1 times
scravas
3 weeks ago
just wanted to note out that "Azure AD directory" (in the explanation) is redundant. Good day to
everyone
upvoted 1 times
Question #54Topic 1
Resource groups provide organizations with the ability to manage the compliance of
Azure resources across multiple subscriptions.
• B. Management groups
• C. Azure policies
• D. Azure App Service plans
Correct Answer: C
Azure policies can be used to define requirements for resource properties during
deployment and for already existing resources. Azure Policy controls properties such as
the types or locations of resources.
Azure Policy is a service in Azure that you use to create, assign, and manage policies.
These policies enforce different rules and effects over your resources, so those
resources stay compliant with your corporate standards and service level agreements.
Azure Policy meets this need by evaluating your resources for non- compliance with
assigned policies. All data stored by Azure Policy is encrypted at rest.
For example, you can have a policy to allow only a certain SKU size of virtual machines
in your environment. Once this policy is implemented, new and existing resources are
evaluated for compliance. With the right type of policy, existing resources can be
brought into compliance.
References:
https://docs.microsoft.com/en-us/azure/governance/policy/overview
Learnerz

Shouldn't the answer be B? Msftlearn: "Azure management groups are containers for managing
compliances across multiple subscriptions."
upvoted 78 times
shashu07
6 months ago
Organize and manage multiple Azure subscriptions Azure management groups Azure
management groups help you efficiently manage access, policies, and compliance for your
subscriptions. Each management group is a container for one or more subscriptions.
https://docs.microsoft.com/en-us/azure/cloud-adoption-framework/ready/azure-best-
practices/organize-subscriptions
upvoted 3 times
ashayk
8 months ago
Azure management group manages policies, access and compliance for entire group. But
policies force rule on resources and ensures resources are compliant - like a VM cannot be more
than specific size or type. hence answer is Policies as they control resources.
upvoted 10 times
Channing

I cant even see the underlined text, is anyone else having issues with this. I also chose
management groups for this answer
upvoted 36 times
manyb2ns

maybe "Resource groups"
upvoted 1 times
dodyagung

no underlined text at all
upvoted 2 times
L3o

Yeah, me too. I dont see the underlined text
upvoted 2 times
qxgoizhxyyxplqyccz

Me too
upvoted 1 times
romega2

It's B - If your organization has many subscriptions, you may need a way to efficiently manage
access, policies, and compliance for those subscriptions.
upvoted 1 times
SilkyS19
5 days, 5 hours ago

The policy can be assigned to the Management Group: An assignment is a policy definition or
initiative that has been assigned to take place within a specific scope. This scope could range
from a management group to an individual resource. https://docs.microsoft.com/en-
us/azure/governance/policy/overview https://docs.microsoft.com/en-
us/azure/governance/policy/concepts/scope So, if you are selecting MG over policy just because
of the scope then that's not correct. That's true they both deal with "compliance" Policy -
>Azure Policy helps to enforce organizational standards and to assess compliance at-scale. MG-
> If your organization has many subscriptions, you may need a way to efficiently manage access,
policies, and compliance for those subscriptions. So, as it talks about MANAGING multiple
SUBSCRIPTION it make sense to select Management group as the correct answer.
upvoted 1 times
0byte
1 week, 4 days ago

I think the answer is correct (C) - the devil is in the details :-) Here is my thinking If we assume
the answer is 'Management groups' the whole sentence would be: Management groups provide
organizations with the ability to manage the compliance of Azure resources across multiple
subscriptions. This simply isn't true. Whereas Management groups allow managing many
subscriptions at once they have nothing to do with compliance. It is Azure Policy that manages
compliance. And yes, we would most likely apply Azure Policy, to many subscriptions, via a
Management group
upvoted 3 times
DMAzureBoy
1 week ago
I agree! Management Groups = Control over what users can and can't do Azure Policies =
Control over changes to Resources
upvoted 1 times
Lyonel
1 week, 6 days ago

The CORRECT Answer is 'B' = Management Groups, as stated in the following link: "If your
organization has many subscriptions, you may need a way to efficiently manage access, policies,
and compliance for those subscriptions. Azure management groups provide a level of scope
above subscriptions." https://docs.microsoft.com/en-us/azure/governance/management-
groups/overview NOTE: Azure POLICIES are valid ONLY within one (1) subscription, and as
stated in this link... "Azure Policy evaluates all Azure resources at or below subscription-level"
Link: https://docs.microsoft.com/en-us/azure/governance/policy/overview
upvoted 1 times
cindybriar
2 weeks, 1 day ago

correct answer : B Management Group. Multiple subscription is the key
https://docs.microsoft.com/en-us/azure/governance/management-groups/create-management-
group-portal
upvoted 1 times
Gerardo1971
2 weeks, 2 days ago

Correct answer
upvoted 1 times
devpatel
2 weeks, 3 days ago

I think Azure policy
upvoted 1 times
Lyonel
2 weeks, 4 days ago

Answer should be = B: Answer C = INCORRECT as Azure Policies are valid only within one (1)
subscription; this question specifies "across multiple subscriptions"
upvoted 2 times
PatrickH
1 day ago
Overview of Azure Policy "Once your business rules have been formed, the policy definition or
initiative is assigned to any scope of resources that Azure supports, such as management
groups, subscriptions, resource groups, or individual resources. " Therefore Azure Policies can
apply top Management groups, subscriptions (Plural).
upvoted 1 times
Lyonel
3 weeks ago
Correct answer is B -> C is INCORRECT because Azure Policies are valid only within ONE (1)
Subscription
upvoted 1 times
argoth
3 weeks ago
The key world is "compliance ". Azure Policies is the correct answer
upvoted 2 times
Tony99
3 weeks, 1 day ago

C. 2. Assign the definition to resources To implement your policy definitions, you assign
definitions to resources. A policy assignment is a policy definition that takes place within a
specific scope. This scope could be a management group (a collection of multiple subscriptions),
a single subscription, or a resource group. Policy assignments are inherited by all child resources
within that scope. If a policy is applied to a resource group, that policy is applied to all resources
within that resource group. You can exclude a subscope from the policy assignment if there are
specific child resources you need to be exempt from the policy assignment.
https://docs.microsoft.com/en-us/learn/modules/build-cloud-governance-strategy-azure/8-
control-audit-resources-azure-policy
upvoted 1 times
johnyjohny1
1 month ago
Lol literally verbatim management groups https://docs.microsoft.com/en-
us/azure/governance/management-groups/create-management-group-portal
upvoted 2 times
aeai
1 month, 1 week ago

Management Group (logical entity) provide subscription grouping capability but cannot define
compliance (rules) whereas Azure Policy can define rules (i.e. compliance) across multiple
subscriptions (grouping is provided by Management Group). So Azure Policy uses MG to
manage compliance across multiple subscriptions.
upvoted 2 times
nigeldmgriffith
1 month, 1 week ago

C: Azure Policies https://docs.microsoft.com/en-us/azure/governance/policy/tutorials/create-
and-manage
upvoted 1 times
rishi_ram
1 month, 1 week ago
Management groups are containers that help you manage access, policy, and compliance across
multiple subscriptions. Create these containers to build an effective and efficient hierarchy that
can be used with Azure Policy and Azure Role Based Access Controls. Management groups are
containers that help you manage access, policy, and compliance across multiple subscriptions.
Create these containers to build an effective and efficient hierarchy that can be used with Azure
Policy and Azure Role Based Access Controls. hope people get the right answer from this link
https://docs.microsoft.com/en-us/azure/governance/management-groups/create-management-
group-portal
upvoted 1 times
Question #55Topic 1
Your company plans to migrate to Azure. The company has several departments. All
the Azure resources used by each department will be managed by a department
administrator.
What are two possible techniques to segment Azure for the departments? Each correct
answer presents a complete solution.
• A. multiple subscriptions
• B. multiple Azure Active Directory (Azure AD) directories
• C. multiple regions
• D. multiple resource groups
Correct Answer: AD
An Azure subscription is a container for Azure resources. It is also a boundary for
permissions to resources and for billing. You are charged monthly for all resources in a
subscription. A single Azure tenant (Azure Active Directory) can contain multiple Azure
subscriptions.
A resource group is a container that holds related resources for an Azure solution. The
resource group can include all the resources for the solution, or only those resources
that you want to manage as a group.
To enable each department administrator to manage the Azure resources used by that
department, you will need to create a separate subscription per department. You can
then assign each department administrator as an administrator for the subscription to
enable them to manage all resources in that subscription.
Reference:
https://docs.microsoft.com/en-us/azure/cost-management-billing/manage/create-
subscription https://docs.microsoft.com/en-us/azure/cost-management-
billing/manage/add-change-subscription-administrator
Spdln

The answer is correct.
upvoted 16 times
Mony_21

the question clearly states "Each correct answer presents a complete solution" so it is basically
asking us to outline every way the solution will be reached from Subscriptions to Resource
Groups or Resource Groups directly.
upvoted 6 times
Sheduic7720

Thank you For your clarification, you have said what I was thinking
upvoted 1 times
Gerardo1971

correct answer
upvoted 1 times
IAmAFighterGal
1 month ago
This came in the exam on 10Apr2021.
upvoted 2 times
hereisahtesham
1 month, 1 week ago

Hi Guys, In this Kind of Questions where "Each correct answer presents a complete solution" is
written, Cant we mark all the answers if we are not sure of which 2 are correct? As there is no
negative marking. Please advise.
upvoted 3 times
panal

Correct
upvoted 2 times
murat12345

Can you make resource groups in resource groups? If not, than I don't think the answer is very
practical you know.. because 1 resource group would be filled with a lot of resources
upvoted 1 times
VVR141
1 month, 1 week ago

there is no need that we must have only few resources in a single RG, if that demands as per
company requirements they can have them. And in that case admin can do that using an extra
layer of segregation by using TAGs for all the resources across\ RGs
upvoted 1 times
mikl

This is actually a really good question. A and D are the correct answers.
upvoted 2 times
neil1985_jy

Correct
upvoted 2 times
nazant

Resource groups are created in subscriptions. Why then we need to mark groups as answer as
departments are already separated by different subscriptions?
upvoted 3 times
Sultanista

You can either choose subscription only or resource groups only or combine both. Each can be
administrated separately
upvoted 4 times
ElsaBBP
11 months ago
I agree, don't think the answer is correct!
upvoted 1 times
Learner05

the question has asked for two possible options . you can do either subsription per department
or resource groups per department
upvoted 4 times
winston_45

Agreed. If it asked for one possible option "subscription" would be the answer.
upvoted 3 times
Chichi1974
12 months ago
correct answer
upvoted 2 times
Question #56Topic 1
HOTSPOT -
select No.
Hot Area:
Correct
Answer:
Box 1: Yes -
You can use the same account to manage multiple subscriptions. You can create an
additional subscription for your account in the Azure portal. You may want an additional
subscription to avoid hitting subscription limits, to create separate environments for
security, or to isolate data for compliance reasons.
Box 2: No -
You cannot merge two subscriptions into a single subscription. However, you can move
some Azure resources from one subscription to another. You can also transfer
ownership of a subscription and change the billing type for a subscription.
Box 3: Yes -
A company can have multiple subscriptions and store resources in the different
subscriptions. However, a resource instance can exist in only one subscription.
Reference:
subscription
pigandarias
Highly Voted 1 month, 1 week ago

upvoted 5 times
puj

Correct
upvoted 5 times
Gerardo1971

Correct answer
upvoted 3 times
Bursuc03
3 weeks, 2 days ago

yes/no/no
upvoted 1 times
romega2

delete this shit
upvoted 3 times
bcih

Correct
upvoted 3 times
Question #57Topic 1
HOTSPOT -
Hot Area:
Correct
Answer:
You can move a VM and its associated resources to a different subscription by using
the Azure portal.
Moving between subscriptions can be handy if you originally created a VM in a personal
subscription and now want to move it to your company's subscription to continue your
work. You do not need to start the VM in order to move it and it should continue to run
during the move.
Reference:
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/move-vm
t213

upvoted 1 times
AlexDan87
1 month, 1 week ago

What happens with the resource group that the VM was in? Does it stay as is, no change?
upvoted 2 times
Chief
3 weeks, 4 days ago

I think it will remain as long you didn't delete it. In this case you are moving ONLY the VM to
another sub
upvoted 1 times
CodePoet

Yes, the correct answer is B. https://docs.microsoft.com/en-us/azure/azure-resource-
manager/management/move-resource-group-and-subscription
upvoted 3 times
Question #58Topic 1
You have an Azure environment that contains multiple Azure virtual machines.
You plan to implement a solution that enables the client computers on your on-premises
network to communicate to the Azure virtual machines.
You need to recommend which Azure resources must be created for the planned
solution.
Which two Azure resources should you include in the recommendation? Each correct
answer presents part of the solution.
• A. a virtual network gateway

• B. a load balancer
• C. an application gateway
• D. a virtual network
• E. a gateway subnet
Correct Answer: AE
To implement a solution that enables the client computers on your on-premises network
to communicate to the Azure virtual machines, you need to configure a
VPN (Virtual Private Network) to connect the on-premises network to the Azure virtual
network.
The Azure VPN device is known as a Virtual Network Gateway. The virtual network
gateway needs to be located in a dedicated subnet in the Azure virtual network. This
dedicated subnet is known as a gateway subnet and must be named
‫ג‬€˜GatewaySubnet‫ג‬€™.
Note: a virtual network (answer D) is also required. However, as we already have virtual
machines deployed in a Azure, we can assume that the virtual network is already in
place.
References:
https://docs.microsoft.com/en-us/office365/enterprise/connect-an-on-premises-network-
to-a-microsoft-azure-virtual-network
NoNotSpam

If you already have Azure VMs, this implies you have a VNet already. Thus the answer should be
Gateway Subnet and VNet Gateway
upvoted 125 times
whoru

Agreed. There are only two choices. If you only created the VNet and Vnet Gateway, wouldn't a
Gateway subnet still be required to make the connection?
upvoted 2 times
Nilzuka

This is absolutely correct.
upvoted 1 times
ananthbhaskar
11 months ago
It has been mentioned that they are planning to connect On prem with Azure, so we need to
consider there is no VM exist. keyword word is Planning. Answer would be Virtual Network &
virtual network gateway.
upvoted 15 times
Adefe
1 month, 1 week ago
I don't agree
upvoted 1 times
N3rdy
10 months ago
Wrong. The plan is about client computers that are on-prem connecting to Azure VMs. You
already have an Azure environment with existing VMs, to which you want to connect to.
Meaning Virtual network already exists. So you need a gateway subnet and a VNET gateway.
upvoted 15 times
_syamantak

No, the qs clearly says to plan for "on-premises network to communicate to the Azure virtual
machines." if there is a VM in azure, a Vnet is already created. you gotta create the VPN gateway
(A)
upvoted 4 times
awssecuritynewbie
9 months ago
it says" you need to plan" not to plan to make the VMs ..
upvoted 2 times
richardsonbq

I agree with your logic. I was also wondering wether Gateway Subnet is really a resource (for me,
is just a configuration). So maybe the best answer would be Virtual Netowrk Gateway and Virtual
Newtwork (if not already exists)
upvoted 23 times
jcmoranp

Solutions is A and D.
upvoted 50 times
RSMCT2011

https://docs.microsoft.com/en-us/office365/enterprise/connect-an-on-premises-network-to-a-
microsoft-azure-virtual-network
upvoted 4 times
ArSung

I guess it.
upvoted 1 times
Gerardo1971

Correct answer
upvoted 1 times
Bursuc03
3 weeks, 2 days ago

AE: Implement a vNet Gateway - that requires a GatewaySubnet
upvoted 1 times
JeanGar
3 weeks, 6 days ago

AETo set up the VPN connection between your Azure virtual network and your on-premises
network, follow these steps: On-premises: Define and create an on-premises network route for
the address space of the Azure virtual network that points to your on-premises VPN device.
Microsoft Azure: Create an Azure virtual network with a site-to-site VPN connection. On
premises: Configure your on-premises hardware or software VPN device to terminate the VPN
connection, which uses Internet Protocol security (IPsec). After you establish the site-to-site VPN
connection, you add Azure virtual machines to the subnets of the virtual network.
upvoted 1 times
Haidc

The first sentence stated Azure VMs is already available. Therefore, the answer is correct.
upvoted 1 times
km_cloud
2 months ago
Virtual network, VPN gateway https://docs.microsoft.com/en-us/azure/vpn-gateway/tutorial-
site-to-site-portal
upvoted 2 times
kongf
2 months ago
Answer A & E , Check image https://docs.microsoft.com/en-us/azure/architecture/reference-
architectures/hybrid-networking/images/vpn.png
upvoted 2 times
kongf
2 months ago
Better Presentation for answer: https://docs.microsoft.com/en-
us/archive/blogs/solutions_advisory_board/calculating-the-gateway-subnet-address-space-for-
azure-virtual-networks
upvoted 1 times
badguytoo

that's incorrect.... As I had VMs on Azure u absolutely don't need a VPN gateway to connect.
upvoted 1 times
panal
3 months ago
A and D
upvoted 1 times
wyt3fr0g

The fact that you guys disagree with the answer makes me think this website is very poor.
upvoted 4 times
Joker20

as we dont know from last year which answer is correct ??
upvoted 2 times
Kopy

A,E sure.
upvoted 2 times
delezac

A and D is the correct answer. RESOURCE is a key word
upvoted 2 times
mikl

Question states : "You have an Azure environment that contains multiple Azure virtual
machines." So, a virtual network already exists. Correct answer is A and E.
upvoted 1 times
nigeldmgriffith

A & D ==> Azure VMs already exists therefore you require the gateways accomplish the desired
communication.
upvoted 1 times
Seema_exam
4 months ago
A, E should be the ans You plan to implement a solution that enables the client computers on
your on-premises network to communicate to the Azure virtual machines. You need to
recommend which Azure resources must be created for the planned solution. Which two Azure
resources should you include in the recommendation? Each correct answer presents part of the
solution. NOTE: Each correct selection is worth one point.
upvoted 1 times
ryu

No, a gateway subnet is NOT a resource, but part of the vpn gateway resource.
upvoted 2 times
Question #59Topic 1
You attempt to create several managed Microsoft SQL Server instances in an Azure
environment and receive a message that you must increase your Azure subscription
limits.
What should you do to increase the limits?
• A. Create a service health alert

• B. Upgrade your support plan
• C. Modify an Azure policy
• D. Create a new support request
Correct Answer: D
Many Azure resource have quote limits. The purpose of the quota limits is to help you
control your Azure costs. However, it is common to require an increase to the default
quota.
You can request a quota limit increase by opening a support request. In the support
request, select ‫ג‬€˜Service and subscription limits (quotas)‫ג‬€™ for the Issue type, select
your subscription and the service you want to increase the quota for. For this question,
you would select ‫ג‬€˜SQL Database Managed Instance‫ג‬€™ as the quote type.
Reference:
https://docs.microsoft.com/en-us/azure/sql-database/sql-database-managed-instance-
resource-limits#obtaining-a-larger-quota-for-sql-managed-instance
axman832005

was on the test
upvoted 54 times
Ragijo

https://docs.microsoft.com/en-us/azure/azure-subscription-service-limits Note: If you want to
raise the limit or quota above the default limit, open an online customer support request at no
charge.
upvoted 49 times
Hatu
4 months ago
Are we supposed to know everything for basics exam, this is beyond crazy!
upvoted 24 times
Woodlandsu35

Welcome to the world of certification! No kiddin' , did the whole enchilada some 20 years ago:
MCSE-CNE-Prince- ISM Servce Managment , it hasn't changed a bit...
upvoted 1 times
DevastatingDj

I feel you brother :(
upvoted 1 times
Franco11

How should we know this info? i am learning AZ-900 online on Microsoft site, and this was not
mentioned on the website
upvoted 3 times
Gerardo1971
2 weeks, 2 days ago

Correct answer
upvoted 1 times
eArmin

Is it available for all subscription plans, even with Basic support? or you have to upgrade your
support plan because the basic support doesn't have ticket support?
upvoted 1 times
NightMonkey
3 weeks ago
https://azure.microsoft.com/en-us/support/plans/ Bro, Basic plan gives you the ability to submit
as many support tickets as you need. Check out that link for confirmation.
upvoted 1 times
Massy

you can create a ticket support with the basic plan
upvoted 1 times
VictorVE

"If you want to raise the limit or quota above the default limit, open an online customer support
request at no charge." https://docs.microsoft.com/en-us/azure/azure-resource-
manager/management/azure-subscription-service-limits
upvoted 3 times
lehuspohus

Was on my test, answered "D. Create a new support request", got 100% in this exam section, so
answer is definitely valid.
upvoted 13 times
seldawy

Which Azure service should you use to correlate events from multiple resources into a
centralized repository? A. Azure Event Hubs B. Azure Analysis Services C. Azure Monitor D. Azure
Log Analytics help me please
upvoted 1 times
male

C and D both are correct
upvoted 1 times
resa

D Its disccused in other question
upvoted 1 times
nikesh1986

Create Support Request is the Correct Answer. I was part of the support team which handled this
issue
upvoted 1 times
ecedilip

Option D is correct. we need to open service request to Azure
upvoted 1 times
Nnina

If it was "update your subscription plan" then B was correct. It's a word play. So yeah,it's D. You
have to open a ticket (support request) in order to increase the limits of your subscription.
upvoted 1 times
Garrydhesa
9 months ago
Got this on test too on 15-Aug-2020
upvoted 6 times
Kashan_Ali

I have selected to upgrade the subscription if we have the free trial subscription. But according
to the documentation, those who have the free trial can't change the limit. They have to
upgrade first and the need to make a request for this change of limit. Am I correct in my
understanding?
upvoted 1 times
Kashan_Ali

It came on the test.
upvoted 5 times
ManU1

Answer is correct, every account has default quota which can be increased by opening support
ticket.
upvoted 7 times
kilowd

https://knowledge.mycloudit.com/request-core-increase-azure-subscription
upvoted 1 times
Jitu2007

To obtain more DTU/eDTU quota, vCore quota, or more servers than the default amount, submit
a new support request in the Azure portal. For more information, see Request quota increases
for Azure SQL Database. https://docs.microsoft.com/en-us/azure/azure-sql/database/resource-
limits-logical-server
upvoted 2 times
touryard

The limit can be raised above the default limit but not above the maximum limit. If you want to
raise the limit or quota above the default limit, open an online customer support request at no
charge.
upvoted 2 times
Question #60Topic 1
HOTSPOT -
select No.
Hot Area:
Correct
Answer:
Box 1: Yes -
You can assign additional account administrators in the Azure Portal.
Box 2: No -
You need an Azure Active Directory account to manage a subscription, not a Microsoft
account.
An account is created in the Azure Active Directory when you create the subscription.
Further accounts can be created in the Azure Active Directory to manage the
subscription.
Box 3: No -
Resource groups are logical containers for Azure resources. However, resource groups
do not contain subscriptions. Subscriptions contain resource groups.
References:
https://docs.microsoft.com/en-us/office365/enterprise/subscriptions-licenses-accounts-
and-tenants-for-microsoft-cloud-offerings
cherrada

You can only have one account administrator per subscription: https://docs.microsoft.com/en-
upvoted 40 times
Rooks
1 year, 1 month ago

This is correct as the article says and I confirmed in my subscription.. Classic subscription
administrator Limit - Account Administrator 1 per Azure account
upvoted 10 times
GreenyErin

Exactly, Account Administrator: 1 per Azure account => an account may have a number of
subscriptions but still have 1 Account administrator Link: https://docs.microsoft.com/en-
upvoted 3 times
sbettani

The link says the opposite "In the Azure portal, you can manage Co-Administrators or view the
Service Administrator by using the Classic administrators tab." there are three types of
administrators. "The account that is used to sign up for Azure is automatically set as both the
Account Administrator and Service Administrator. Then, additional Co-Administrators can be
added. " Source https://docs.microsoft.com/en-us/azure/role-based-access-control/rbac-and-
directory-admin-roles
upvoted 7 times
Ananas
1 year, 1 month ago

@sbettani: more than one administrator, but ONLY ONE account administrator!
upvoted 24 times
Danny3010

You can have 1 Account Administrator and 1 Service Administrator, but you can have 200 Co-
Administrators per subscription
upvoted 21 times
rlny88

I agree. If they worded differently such as "multiple administrator accounts" vs. "multiple
account administrators"..
upvoted 19 times
gelato

You nailed it
upvoted 7 times
PLAM63

Answer is No, No, No
upvoted 2 times
Thao_Mi
4 days, 3 hours ago

What is the right answer please? Y, N, N?
upvoted 1 times
Droplex

Answers should be NO,NO,NO
upvoted 3 times
Huawei_55

Yes !! The account administrator is limited to 1 per Azure Account.
upvoted 2 times
Ranoooosh
2 weeks, 1 day ago

First statement: wrong answer, you can have one account administrator, one service
administrator and 200 co - administrator (who have the same access privileges as the Service
Administrator, NOT account administrator) https://docs.microsoft.com/en-us/azure/role-based-
access-control/rbac-and-directory-admin-roles so the answer should be: No
upvoted 2 times
Nova077
2 weeks, 1 day ago

1. You can create co administrators per subscription: hence the first answer should be yes Here's
how you can add co administrator: https://docs.microsoft.com/en-us/azure/role-based-access-
control/classic-administrators Hence Answer is Yes 2. To have an azure subscription you need a
Microsoft account: https://docs.microsoft.com/en-us/dynamics-nav/how-to--sign-up-for-a-
microsoft-azure-subscription. First line: To gain access to the Microsoft Azure management
portal, you must have an Azure subscription and a Microsoft account associated with that
subscription hence the answer is Yes 3. Resource Groups belong to subscriptions Hence the
answer is No.
upvoted 2 times
SunilBudhwani
2 weeks, 2 days ago

Answer Should be No/No/No
upvoted 1 times
FabiZamora93
2 weeks, 4 days ago

NO-You can have 1 Account Administrator and 1 Service Administrator, but you can have 200
Co-Administrators per subscription NO- You need an Azure Active Directory account to manage
a subscription, not a Microsoft account. An account is created in the Azure Active Directory
when you create the subscription. Further accounts can be created in the Azure Active Directory
to manage the subscription NO - Subscriptions contain multiple resource groups. Aguas con el
orden! Check the proper order that is taught in the material
upvoted 1 times
Bursuc03
2 weeks, 6 days ago

No/Yes/No: - It is clearly stated in the documentation that the account administrator is unique.
The rest of the roles (Co-administrators, etc) are not unique - You cannot manage using a non-
Microsoft account: how can MS trust an account authenticated against a different infrastructure?
- a RG is just a container for infrastructure objects, not for subscriptions.
upvoted 3 times
Arqueiro
2 weeks, 1 day ago

#2 is Yes https://docs.microsoft.com/en-us/dynamics-nav/how-to--sign-up-for-a-microsoft-
azure-subscription "To gain access to the Microsoft Azure management portal, you must have
an Azure subscription and a Microsoft account associated with that subscription."
upvoted 1 times
madabatta
3 weeks, 5 days ago

Someone knows the correct answer? I'm confused with all those comments...
upvoted 2 times
pigandarias
1 month, 1 week ago

upvoted 5 times
Ashu20
1 month ago
What is the correct answer, especially for the 1st option it is confusing?
upvoted 3 times
Bernal8
1 month, 1 week ago

Weeks ago I attented to a Microsoft AZ900 course, and i asked the professor if there could be
more than one admin. He told me YES. Also, y asked him if i could use another kind of account
different from a microsoft one, and he told me YES as well, as i was able to use for example my
work account (which is NOT @microsoft.com).
upvoted 2 times
Maharba
6 days, 4 hours ago

Your Microsoft account is not necessarily @microsoft.com
upvoted 1 times
rptcs

can someone pls correct the answers choices. Its YES: NO: NO or something else. I have
scheduled my certification and need to prepare with correct answers.
upvoted 1 times
Tanvirwq

Same question appears in as Q39 & Q191, surprisingly answer is different on either side.
upvoted 11 times
Maharba
6 days, 4 hours ago

I was going to say the same. Now I'm so confused as to what's what
upvoted 1 times
smgjAZ

Per https://docs.microsoft.com/en-us/azure/role-based-access-control/rbac-and-directory-
admin-roles#classic-subscription-administrator-roles Account Administrator: 1 per Azure
account: Conceptually, the billing owner of the subscription.
upvoted 2 times
milirocks

What do I need to sign up for a free account? All you need is a phone number, a credit card, and
a GitHub account or Microsoft account username (formerly Windows Live ID).
upvoted 3 times
Question #61Topic 1
HOTSPOT -
select No.
Hot Area:
Correct
Answer:
Box 1: No -
Not all Azure regions support availability zones.
Box 2: No -
Availability zones can be used with many Azure services, not just VMs.
Box 3: No -
Availability Zones are unique physical locations within a single Azure region.
Reference:
https://docs.microsoft.com/en-us/azure/availability-zones/az-region#azure-regions-with-
availability-zones
tracyrow
1 day, 9 hours ago

There are some regions that do not have availability zones today UK West and India West as
idenfified by another contributor. See this and the legend key https://azure.microsoft.com/en-
us/global-infrastructure/geographies/#geographies
upvoted 2 times
rich2508
1 week, 5 days ago

correct not all azure regions have AZ's example India west https://azure.microsoft.com/en-
au/global-infrastructure/geographies/#geographies the map shows which regions its not yet
there and is announced for the future
upvoted 1 times
Gerardo1971
2 weeks, 2 days ago

Correct answer
upvoted 2 times
Fedexss1
1 month ago
I don't get the first one. They always say that every region has at least 3 availability zones, how is
it that some of them cannot enable AZ
upvoted 3 times
Maharba
6 days, 4 hours ago

All recommended regions have AZs. However, there are Alternate (other) regions and those
ones don't have AZs YET. They exist to extend the Azure's footprint within a data residency
boundary
upvoted 2 times
vincho
3 weeks ago
I think answer for 1st question is NO as not every region has multiple Availability Zones. Some
regions may have only one Availability Zone.
upvoted 1 times
IlonaCT
2 weeks, 5 days ago

No - some old regions still have availability sets. You can either have availability set or
availability zone not both
upvoted 1 times
GuyJosenhans
1 month, 1 week ago

Yes, on one Availability Zone Unique physical locations within a region. Each zone is made up of
one or more datacenters equipped with independent power, cooling, and networking.
https://docs.microsoft.com/en-us/azure/availability-zones/az-overview
upvoted 1 times
OscarS

I think 1 should be YES. It says "Avaliabilty zonces can be implemented..." not "Availability zones
are implemented...". That means in the future "can" be true. What do you think?
upvoted 4 times
vincho
3 weeks ago
Not every region has multiple Availability Zone. Some regions may have only one Availability
Zone.
upvoted 1 times
jurimec

No No Yes
upvoted 3 times
FabiZamora93
1 month, 1 week ago

They are saying how they are used not what they are. I believe the answer explains what they are
but not their purpose (which is the point of the question). Availability zones are used to replicate
your data in different physical locations and I can choose to locate my data in 2 different regions
to ensure high availability
upvoted 1 times
werbinich
2 months ago
No, not all Azure regions are with Availability Zones. [Question 1] details below:
https://docs.microsoft.com/en-us/azure/availability-zones/az-region
upvoted 3 times
kongf
2 months ago
(1) Y (2) N (3)Y updates link https://docs.microsoft.com/en-gb/azure/availability-zones/az-
overview
upvoted 1 times
johnyjohny1
1 month ago
Not all regions have AZ https://azure.microsoft.com/en-us/global-infrastructure/geographies/
upvoted 3 times
werbinich
2 months ago
No, Availability Zones are physically separate datacenters within an Azure region only. However
Regions can form "Regional Pair" among themself. [within the same geographical area, which is
at least 300 miles away --- with some exceptions] [Question 3]
upvoted 3 times
Question #62Topic 1
HOTSPOT -
You plan to create an Azure virtual machine.
You need to identify which storage service must be used to store the unmanaged data
disks of the virtual machine.
What should you identify? To answer, select the appropriate service in the answer area.
Hot Area:
Correct
Answer:
Azure containers are the backbone of the virtual disks platform for Azure IaaS. Both
Azure OS and data disks are implemented as virtual disks where data is durably
persisted in the Azure Storage platform and then delivered to the virtual machines for
maximum performance. Azure Disks are persisted in Hyper-V VHD format and stored
as a page blob in Azure Storage.
Reference:
https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-pageblob-overview
Gerardo1971
2 weeks, 2 days ago

Correct answer
upvoted 1 times
kris09on
4 weeks ago
"storage service must be used to store the unmanaged data disks of the virtual machine". Azure
Container is not a Storage service and 'unmanaged data disks of the VM' means something
outside of VM. 1 of the option in this link should be the answer- https://azure.microsoft.com/en-
ca/product-categories/storage/??
upvoted 1 times
sdas2021

Correct. This came in the test yesterday. Thank you examtopics. Scored 910
upvoted 4 times
CodePoet

No one is expected to miss this one.
upvoted 2 times
panal
3 months ago
Answer is Correct
upvoted 3 times
Question #63Topic 1
Your company plans to move several servers to Azure.
The company‫ג‬€™s compliance policy states that a server named FinServer must be on
a separate network segment.
You are evaluating which Azure services can be used to meet the compliance policy
requirements.
Which Azure solution should you recommend?
• A. a resource group for FinServer and another resource group for all the other servers
• B. a virtual network for FinServer and another virtual network for all the other servers
• C. a VPN for FinServer and a virtual network gateway for each other server
• D. one resource group for all the servers and a resource lock for FinServer
Correct Answer: B
Networks in Azure are known as virtual networks. A virtual network can have multiple IP
address spaces and multiple subnets. Azure automatically routes traffic between
different subnets within a virtual network.
The question states that FinServer must be on a separate network segment. The only
way to separate FinServer from the other servers in networking terms is to place the
server in a different virtual network to the other servers.
References:
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-vnet-plan-design-
arm
gelato

Why is this being asked for Azure Fundamentals? This kind of question is like for experience. The
goal of Azure Fundamentals is only to make you aware of the services it offers and how to
navigate the Azure portal.
upvoted 37 times
success101

B is correct. This is a network segmentation.
upvoted 16 times
Gerardo1971

Correct answer
upvoted 1 times
Min_Thu

I was thinking A but ans is B and key work is a separate network segment.
upvoted 1 times
panal
3 months ago
B is Correct
upvoted 1 times
nigeldmgriffith

B ==> separate VLANs is the way to go.
upvoted 1 times
Ritz40

B - is correct
upvoted 1 times
janshal

The answer is B because Resource group is a container and not a Service
upvoted 1 times
albh

so what layer is virtual network or resource group run?
upvoted 1 times
AndyCosStav

Network is the keyword here.
upvoted 1 times
Vivek007

B is correct. Resource group option is provide to confuse. Resource group helps to manage
resources in it which can be things like access etc.
upvoted 1 times
totto1230

Separate=Vnets (or subnets)
upvoted 1 times
hari89k

B is Correct
upvoted 1 times
Shiven

https://cloudacademy.com/blog/an-overview-of-azure-storage-part-1/
upvoted 2 times
Question #64Topic 1
You plan to map a network drive from several computers that run Windows 10 to Azure
Storage.
You need to create a storage solution in Azure for the planned mapped drive.
What should you create?
• A. an Azure SQL database

• B. a virtual machine data disk
• C. a Files service in a storage account
• D. a Blobs service in a storage account
Correct Answer: C
Azure Files is Microsoft's easy-to-use cloud file system. Azure file shares can be
seamlessly used in Windows and Windows Server.
To use an Azure file share with Windows, you must either mount it, which means
assigning it a drive letter or mount point path, or access it via its UNC path.
Unlike other SMB shares you may have interacted with, such as those hosted on a
Windows Server, Linux Samba server, or NAS device, Azure file shares do not currently
support Kerberos authentication with your Active Directory (AD) or Azure Active
Directory (AAD) identity, although this is a feature we are working on.
Instead, you must access your Azure file share with the storage account key for the
storage account containing your Azure file share. A storage account key is an
administrator key for a storage account, including administrator permissions to all files
and folders within the file share you're accessing, and for all file shares and other
storage resources (blobs, queues, tables, etc) contained within your storage account.
References:
https://docs.microsoft.com/en-us/azure/storage/files/storage-how-to-use-files-windows
7v

Windows 10 run SMB so File service in Storage account is a better answer.
upvoted 16 times
Himanshumittal500

Azure file is completely managed file share that you can mount like smb file share that means
existing application that uses network attached storage (NAS) device or SMB device. for Window
10 SMB Version is 2.1
upvoted 5 times
Gerardo1971

Correct answer
upvoted 1 times
Adenike

This specific question does not specify any file format or size. We never can tell the different file
formats that would have been saved in each window 10 computer.
upvoted 2 times
panal
3 months ago
Correct Answer is C.
upvoted 1 times
amanpritkaur
4 months ago
The given option is correct. "Azure Files enables you to set up highly available network file
shares that can be accessed by using the standard Server Message Block (SMB) protocol."
https://docs.microsoft.com/en-us/azure/storage/common/storage-introduction#azure-files
upvoted 3 times
Ritz40

C - Network or shared FS
upvoted 1 times
Sparrow033
8 months ago
Answer is correct. Explanation: Azure Files is Microsoft's easy-to-use cloud file system. Azure file
shares can be seamlessly used in Windows and Windows Server. To use an Azure file share with
Windows, you must either mount it, which means assigning it a drive letter or mount point path,
or access it via its UNC path. Unlike other SMB shares you may have interacted with, such as
those hosted on a Windows Server, Linux Samba server, or NAS device, Azure file shares do not
currently support Kerberos authentication with your Active Directory (AD) or Azure Active
Directory (AAD) identity, although this is a feature we are working on. Instead, you must access
your Azure file share with the storage account key for the storage account containing your
Azure file share. A storage account key is an administrator key for a storage account, including
administrator permissions to all files and folders within the file share you're accessing, and for all
file shares and other storage resources (blobs, queues, tables, etc) contained within your storage
account. References: https://docs.microsoft.com/en-us/azure/storage/files/storage-how-to-use-
files-windows
upvoted 4 times
shiva99
9 months ago
that totally depend on data as structured or unstructured
upvoted 2 times
Gabaky

Files stored on a network share are accessible to anyone who has permissions to the share
upvoted 2 times
calypso

I thought files have to be SMB3, the question does not make any reference to this. Why can this
not be blob?
upvoted 3 times
VTHAR

I can't find any reference to directly map a blob storage to Win10. But you can find easily for
Azure Files here https://docs.microsoft.com/en-us/azure/storage/files/storage-how-to-use-files-
windows. Therefore, the correct answer would be C.
upvoted 3 times
Ficak

Files service is correct answer as we are talking here about physical machines. Files service is a
space which is used for SMB 3.x
upvoted 4 times
STH

After Microsoft Learn : "Disk storage provides disks for virtual machines, applications, and other
services to access and use as they need, similar to how they would in on-premises scenarios." So
the answer is wrong and we should use Disk Storage on VM
upvoted 4 times
STH

Erratum : a file service in a storage account is made to be mapped to multiple machines with
SMB3
upvoted 54 times
Question #65Topic 1
HOTSPOT -
You plan to implement an Azure database solution.
You need to implement a database solution that meets the following requirements:
✑ Can add data concurrently from multiple regions
✑ Can store JSON documents
Which database service should you deploy? To answer, select the appropriate service
in the answer area.
Hot Area:
Correct
Answer:
Azure Cosmos DB is Microsoft's globally distributed, multi-model database service. With

a click of a button, Cosmos DB enables you to elastically and independently scale
throughput and storage across any number of Azure regions worldwide.
Azure Cosmos DB is a great way to store unstructured and JSON data. Combined with
Azure Functions, Cosmos DB makes storing data quick and easy with much less code
than required for storing data in a relational database.
References:
https://docs.microsoft.com/en-us/azure/cosmos-db/introduction
https://docs.microsoft.com/en-us/azure/azure-functions/functions-integrate-store-
unstructured-data-cosmosdb?tabs=csharp
knowledgeshared
1 day, 8 hours ago

key here is multiple region
upvoted 2 times
Alexandersss
2 weeks, 4 days ago

correct
upvoted 1 times
rob_724

yep its cosmos db
upvoted 2 times
panal
3 months ago
Answer is Correct.
upvoted 3 times
Question #66Topic 1
Your company plans to migrate all its network resources to Azure.
You need to start the planning process by exploring Azure.
What should you create first?
• A. a subscription
• B. a resource group
• C. a virtual network
• D. a management group
Correct Answer: A
The first thing you create in Azure is a subscription. You can think of an Azure
subscription as an ‫ג‬€Ãzure account‫ג‬€™. You get billed per subscription.
A subscription is an agreement with Microsoft to use one or more Microsoft cloud
platforms or services, for which charges accrue based on either a per-user license fee
or on cloud-based resource consumption.
Microsoft's Software as a Service (SaaS)-based cloud offerings (Office 365,
Intune/EMS, and Dynamics 365) charge per-user license fees.
Microsoft's Platform as a Service (PaaS) and Infrastructure as a Service (IaaS) cloud
offerings (Azure) charge based on cloud resource consumption.
You can also use a trial subscription, but the subscription expires after a specific
amount of time or consumption charges. You can convert a trial subscription to a paid
subscription.
Organizations can have multiple subscriptions for Microsoft's cloud offerings.
References:
https://docs.microsoft.com/en-us/office365/enterprise/subscriptions-licenses-accounts-
and-tenants-for-microsoft-cloud-offerings
MartinMystere

Ideally you should first do a project plan :) . But that is not in the options. All other options can
only be done after subscribing to the portal.
upvoted 19 times
George124

This is not the Project Management/PMP class bruv' LOL
upvoted 11 times
1 year, 1 month ago

you don't create a plan in azure...
upvoted 3 times
zorro1

You are wrong. The answer should be related to "by exploring Azure".
upvoted 9 times
1 year, 1 month ago
it assumes an admin that has already explored azure is taking the decision
upvoted 2 times
PektoTheGreat

A soul to live? lol
upvoted 4 times
RohitRai89
12 months ago
first you need a computer??:D
upvoted 11 times
Stuudent

First of all you need luck... to get born at all, to get an education, get a job with good pay, to
pass this damn exam... LUCK, my friends is the answer!
upvoted 8 times
MartinMystere

No, you are wrong. You should first turn on the computer :)
upvoted 52 times
sidharthwader

No, you are wrong first you should buy a computer
upvoted 6 times
HarryJhan
4 months ago
No, you are wrong bro. You should earn money first.
upvoted 3 times
Kandym11
3 weeks, 3 days ago

No bro you have to take birth first.
upvoted 2 times
AnkurK

You are wrong bro.. ghade
upvoted 1 times
sinear

Management group is not a mandatory component in Azure. You may create them to group
subscriptions or other MG, but you can also do without. A subscription, on the other hand, is
mandatory. So the answer is correct. You can't do anything in azure without a subscription.
upvoted 5 times
Gerardo1971

Correct answer
upvoted 1 times
LL1
2 weeks, 6 days ago

I wish people would not fill this place with span such as this!
upvoted 3 times
JoSharp
3 weeks, 4 days ago

subscription is the correct answer
upvoted 2 times
panal
3 months ago
Correct
upvoted 1 times
Franco11

This Question is in Knowledge base in Microsoft and it should be , u create an account first
upvoted 2 times
nigeldmgriffith
4 months ago
A; referencing the given options a subscription is your first step.
upvoted 1 times
alfteezy91

You need money first then you can have subscription for Azure!
upvoted 2 times
Face

Thats true XD
upvoted 1 times
Ebenezer

Subscription is right.
upvoted 1 times
Soltas01

Subscriptins is correct is the firts step to beggin Azure.
upvoted 1 times
Sparrow033
8 months ago
Explanation: The first thing you create in Azure is a subscription. You can think of an Azure
subscription as an ‘Azure account’. You get billed per subscription. A subscription is an
agreement with Microsoft to use one or more Microsoft cloud platforms or services, for which
charges accrue based on either a per-user license fee or on cloud-based resource consumption.
Microsoft's Software as a Service (SaaS)-based cloud offerings (Office 365, Intune/EMS, and
Dynamics 365) charge per-user license fees. Microsoft's Platform as a Service (PaaS) and
Infrastructure as a Service (IaaS) cloud offerings (Azure) charge based on cloud resource
consumption. You can also use a trial subscription, but the subscription expires after a specific
amount of time or consumption charges. You can convert a trial subscription to a paid
subscription. Organizations can have multiple subscriptions for Microsoft's cloud offerings.
References: https://docs.microsoft.com/en-us/office365/enterprise/subscriptions-licenses-
accounts-and-tenants-for-microsoft-cloud-offerings
upvoted 1 times
pranayamr

too broad question , this need to more specific there could be answer first create git or
microsoft acccount because without that you cannot create azure account or go to CSP or by EA
upvoted 1 times
marizvi2
9 months ago
The first step to using Azure is to sign up or create an account. When you sign up, an Azure
subscription is created by default. You need "Account/Subscription" to explore Azure services to
start planning migration of your network resources into Azure. You can begin with a Free
account.
upvoted 4 times
babufrik
9 months ago
The Azure Hierarchy is: -Management Group -Suscriptions -Resource Groups -Resources Why
Management Groups is not the correct?
upvoted 2 times
goran

totally agree with you.
upvoted 1 times
RGU1982
7 months ago
Management Group is optional but Suscription is mandatory.
upvoted 6 times
leomaurodesenv

You can create a free account! heheh Of course, with a free subscription.
upvoted 1 times
MichaelChasingDreams

I find this question funny lol.
upvoted 1 times
Question #67Topic 1
HOTSPOT -
select No.
Hot Area:
Correct
Answer:
Box 1: No -
Azure resources deployed to a single resource group can be located in different
regions. The resource group only contains metadata about the resources it contains.
When creating a resource group, you need to provide a location for that resource group.
You may be wondering, "Why does a resource group need a location?
And, if the resources can have different locations than the resource group, why does the
resource group location matter at all?" The resource group stores metadata about the
resources. When you specify a location for the resource group, you're specifying where
that metadata is stored. For compliance reasons, you may need to ensure that your
data is stored in a particular region.
Box 2: No -
Tags for Resources are not inherited by default from their Resource Group
Box 3: Yes -
A resource group can be used to scope access control for administrative actions. By
default, permissions set at the resource level are inherited by the resources in the
resource group.
Reference:
overview
Edyu

b is no. https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/tag-
resources#inherit-tags
upvoted 9 times
panal

Correct
upvoted 7 times
Techno_Head

On what basis.What reference material shows it is correct or Are you just going through and
saying they are all correct?
upvoted 9 times
FabiZamora93
2 weeks, 4 days ago

Welcome to getting frustrated whenever Panal answers "correct" in every single question
without material to confirm...
upvoted 6 times
Question #68Topic 1
HOTSPOT -
Hot Area:
Correct
Answer:
Azure storage offers different access tiers: hot, cool and archive.
The archive access tier has the lowest storage cost. But it has higher data retrieval
costs compared to the hot and cool tiers. Data in the archive tier can take several hours
to retrieve.
While a blob is in archive storage, the blob data is offline and can't be read, overwritten,
or modified. To read or download a blob in archive, you must first rehydrate it to an
online tier.
Example usage scenarios for the archive access tier include:
✑ Long-term backup, secondary backup, and archival datasets
✑ Original (raw) data that must be preserved, even after it has been processed into
final usable form.
✑ Compliance and archival data that needs to be stored for a long time and is hardly
ever accessed.
Reference:
https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-storage-
tiers?tabs=azure-portal#archive-access-tier
panal

I Agree. https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-storage-
tiers?tabs=azure-portal#archive-access-tier
upvoted 6 times
Edyu

"rehydrated" is a funny term. I imagine that archived data are like "mummified" data - hidden
for a very long time, dehydrated, and in order to recognize it, you "rehydrate" it.
upvoted 5 times
kris09on
4 weeks ago
The way I guessed about it is that we talk about Data Lake for large data usage, so it should be
something related to water so that it becomes accessible- hence 'rehydrated'..
upvoted 2 times
Arqueiro
Most Recent 2 weeks, 1 day ago

Not sure if I understood the difference between "rehydrate" and just restore. If the data is there
but I need to do something before I can access it (rehydrate?) wouldn't that be the same thing
as restore it? Or the data is available on an incredible slow tier and "would be good" to
"rehydrate" it (move) to a faster tier?
upvoted 1 times
Arqueiro
2 weeks, 1 day ago

to my point .. the answer says: "the data MUST be ...." so if it must be something, for me means
"restored", it is not accessible.
upvoted 1 times
Gerardo1971
2 weeks, 2 days ago

Correct answer
upvoted 1 times
Muthu1425

The question doesn't mention about blob storage type, why does it required to rehydrate ?
upvoted 1 times
Question #69Topic 1
HOTSPOT -
You plan to deploy a critical line-of-business application to Azure.
The application will run on an Azure virtual machine.
You need to recommend a deployment solution for the application. The solution must
provide a guaranteed availability of 99.99 percent.
What is the minimum number of virtual machines and the minimum number of
availability zones you should recommend for the deployment? To answer, select the
appropriate options in the answer area.
Hot Area:
Correct Answer:
You need a minimum of two virtual machines with each one located in a different
availability zone.
Availability Zones is a high-availability offering that protects your applications and data
from datacenter failures. Availability Zones are unique physical locations within an
Azure region. Each zone is made up of one or more datacenters equipped with
independent power, cooling, and networking. To ensure resiliency, there‫ג‬€™s a
failures. Zone-redundant services replicate your applications and data across
Availability Zones to protect from single-points-of-failure. With Availability
Zones, Azure offers industry best 99.99% VM uptime SLA.
References:
sbettani

"For all Virtual Machines that have two or more instances deployed across two or more
Availability Zones in the same Azure region, we guarantee you will have Virtual Machine
Connectivity to at least one instance at least 99.99% of the time."
https://azure.microsoft.com/en-us/support/legal/sla/virtual-machines/v1_8/
upvoted 83 times
411

2 VM in each AZ. Does that mean there will be 4 VMs at any given moment? Will that be
failOVer only or sharing load also? Some cloud company recommend 3 and 3.
upvoted 3 times
CarlosM

For all Virtual Machines that have two or more instances deployed across two or more
Availability Zones in the same Azure region, we guarantee you will have Virtual Machine
Connectivity to at least one instance at least 99.99% of the time. For all Virtual Machines that
have two or more instances deployed in the same Availability Set, we guarantee you will have
Virtual Machine Connectivity to at least one instance at least 99.95% of the time. For any Single
Instance Virtual Machine using premium storage for all Operating System Disks and Data Disks,
we guarantee you will have Virtual Machine Connectivity of at least 99.9%
upvoted 26 times
Gerardo1971

Correct answer
upvoted 1 times
panal

Answer Is Correct https://azure.microsoft.com/en-us/support/legal/sla/virtual-machines/v1_9/
upvoted 2 times
panal

It is correct https://azure.microsoft.com/en-us/support/legal/sla/virtual-machines/v1_9/
upvoted 1 times
elvancedonzy

Ans - 2 & 2 Ref - https://azure.microsoft.com/en-us/support/legal/sla/virtual-machines/v1_9/
upvoted 1 times
nigeldmgriffith

99.99% achieved by utilising a min. of 2VMs and 2Zones
upvoted 2 times
agcertif

Why not 3VMs 3AZs plz ?
upvoted 1 times
Sreeram1
1 month, 1 week ago

3 &3 can also do the job, but the question asked about minimum number. So the answer is 2&2.
Hope clarifies it.
upvoted 2 times
iPass01

The key is What is the #minimum number of virtual machines and the minimum number of
availability zone? so simple at least 2 machines and 2 zones.
upvoted 1 times
VictorVE

"Pricing for VMs in Availability Zones There is no additional cost for virtual machines deployed in
an Availability Zone. 99.99% VM uptime SLA is offered when two or more VMs are deployed
across two or more Availability Zones within an Azure region..." https://docs.microsoft.com/en-
upvoted 1 times
dude2020

99.99% VM uptime SLA is offered when two or more VMs are deployed across two or more
Availability Zones within an Azure region. Ref https://docs.microsoft.com/en-
upvoted 1 times
esantonja

https://docs.microsoft.com/en-us/azure/availability-zones/az-overview#pricing-for-vms-in-
availability-zones
upvoted 1 times
Launcher

For 3 VMs in 3 availability zones would it be 99.999?
upvoted 1 times
Alicezhang

Got this in my exam
upvoted 8 times
Jerecax
9 months ago
2 VMs and 2 AZs
upvoted 2 times
CloudBoss

correct is 2 2. What they mean is you can have 1 VM in each AZ - so 2 VMs and 2 AZs
upvoted 6 times
Shades
Why minimum number of VM is 2..We only create 1 VM , it may have 2 instances in 2 Availability
zones
upvoted 2 times
Question #70Topic 1
Which Azure service should you use to collect events from multiple resources into a
centralized repository?
• A. Azure Event Hubs

• B. Azure Analysis Services
• C. Azure Monitor
• D. Azure Stream Analytics
Correct Answer: A
Azure Event Hubs is a big data streaming platform and event ingestion service. It can
receive and process millions of events per second. Data sent to an event hub can be
transformed and stored by using any real-time analytics provider or batching/storage
adapters.
Azure Event Hubs can be used to ingest, buffer, store, and process your stream in real
time to get actionable insights. Event Hubs uses a partitioned consumer model,
enabling multiple applications to process the stream concurrently and letting you control
the speed of processing.
Azure Event Hubs can be used to capture your data in near-real time in an Azure Blob
storage or Azure Data Lake Storage‫ג‬€‰for long-term retention or micro-batch
processing.
Reference:
https://docs.microsoft.com/en-us/azure/event-hubs/event-hubs-about
lighting

C. Azure Monitor -- resources are azure resource -- https://medium.com/@kyleake/exam-az-
900-microsoft-azure-fundamentals-most-complete-preparation-guide-ever-76614d31a59c To
correlate events from multiple resources into a centralized repository. Log data collected by
Azure Monitor is stored in a Log Analytics workspace, which is based on Azure Data Explorer. It
collects telemetry from a variety of sources and uses the Kusto query language used by Data
Explorer to retrieve and analyze data.
upvoted 10 times
SilkyS19

Correct Answer - Azure Monitor Azure Event Hubs is a streaming platform and event ingestion
service. It can transform and store data using any real-time analytics provider or
batching/storage adapters. Use Event Hubs to stream Azure Monitor data to partner SIEM and
monitoring tools Azure Event Hubs is a streaming platform and event ingestion service. It can
transform and store data using any real-time analytics provider or batching/storage adapters.
Use Event Hubs to stream Azure Monitor data to partner SIEM and monitoring tools
upvoted 1 times
IdliSambar
1 week, 6 days ago

Ideally it should be Azure Log Analytics, but since its not given in the option, it should be Azure
Monitor as Log Analytics is a subset in Monitor.
upvoted 1 times
merry_ace
2 weeks, 1 day ago

I would say Azure Monitor instead of event hub the reason is https://docs.microsoft.com/en-
us/azure/azure-monitor/overview in the Monitoring data plat form it says Telemetry such as
events and traces are stored as logs in addition to performance data so that it can all be
combined for analysis.
upvoted 1 times
Cenzu1989
2 weeks, 4 days ago

It should be Azure Log Analytics but there is no option
upvoted 1 times
Nick989898
1 month ago
C. Came up in test. Explanation Azure Monitor maximizes the availability and performance of
your applications and services by delivering a comprehensive solution for collecting, analyzing,
and acting on telemetry from your cloud and on-premises environments. All data collected by
Azure Monitor fits into one of two fundamental types, metrics and logs. Log data collected by
Azure Monitor can be analyzed with queries to quickly retrieve, consolidate, and analyze
collected data. You can create and test queries using Log Analytics in the Azure portal and then
either directly analyze the data using different tools or save queries for use with visualization or
alert rules. Reference: https://docs.microsoft.com/en-us/azure/azure-monitor/overview
upvoted 3 times
werbinich
2 months ago
Answer is correct; keyword is "event" and not just any telemetry data. "Azure Event Hubs — A
big data streaming platform and event ingestion service" >>> https://docs.microsoft.com/en-
us/azure/event-hubs/event-hubs-about
upvoted 4 times
kongf
2 months ago
monitor is blanket term covering all , precise answer as question narrates "Collect EVENT" so
answer event hub https://docs.microsoft.com/en-us/azure/azure-monitor/overview
upvoted 1 times
eniomarques

I believe the question is talking about message events, like a P&S model, so the event hub
seems the correct answer.
upvoted 1 times
sinear

Why not azure monitor ? It also collects logs from resources into a central repo...
upvoted 1 times
eternalenvy

true answer is azure log analytic
upvoted 4 times
Question #71Topic 1
HOTSPOT -
Hot Area:
Correct
Answer:
Azure region.
Reference:
Alexandersss
1 week ago
correct
upvoted 2 times
Question #72Topic 1
HOTSPOT -
select No.
Hot Area:
Correct
Answer:
Box 1: Yes -
There are different replication options available with a storage account. The
‫ג‬€˜minimum‫ג‬€™ replication option is Locally Redundant Storage (LRS). With LRS, data
is replicated synchronously three times within the primary region.
Box 2: No -
Data is not backed up automatically to another Azure Data Center although it can be
depending on the replication option configured for the account. Locally
Redundant Storage (LRS) is the default which maintains three copies of the data in the
data center.
Geo-redundant storage (GRS) has cross-regional replication to protect against regional
outages. Data is replicated synchronously three times in the primary region, then
replicated asynchronously to the secondary region.
Box 3: No -
The limits are much higher than that. The current storage limit is 2 PB for US and
Europe, and 500 TB for all other regions (including the UK) with no limit on the number
of files.
Reference:
https://docs.microsoft.com/en-us/azure/storage/common/storage-account-overview
Joe75

It should read Yes, No, No.
upvoted 7 times
jestar

the key to #3 is "up to". "up to" creates a limit of 2TB, but the actual limit is 5PB
upvoted 5 times
mateo2121

The key word is "up to", so the limit is wrong and answer should be NO
upvoted 5 times
0byte

1. Yes https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/azure-
subscription-service-limits#azure-blob-storage-limits 2. No There is no "build-in backup" that
just happens. Why would it - you might not want to back up everything and then pay for it. You
can of course configure backup in addition if you want using i.e. Azure Backup 3. No
https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/azure-
subscription-service-limits#azure-blob-storage-limits
upvoted 1 times
0byte
1 week, 4 days ago

Sorry! Corrected link for 1. https://docs.microsoft.com/en-us/azure/storage/common/storage-
redundancy#redundancy-in-the-primary-region
upvoted 1 times
Gerardo1971
2 weeks, 2 days ago

Correct answer
upvoted 1 times
koyelchatt
1 month ago
The third one is confusing. Are they asking if the limit is 2TB? Then it is wrong. Or, are they
asking if Azure Storage is capable of storing 2TB? Then it is correct.
upvoted 2 times
CARIOCA
1 month, 1 week ago

There is no limit on files. Honestly, I think the final answer is correct, but I'm not sure.
upvoted 1 times
km_cloud
2 months ago
https://cloud.netapp.com/blog/azure-anf-blg-azure-storage-limits-at-a-glance
upvoted 1 times
panal

I Think the correct Answer is Y-N-Y
upvoted 1 times
Dornaldo

If the limits for the third option are far higher, then the third option is, by definition, 'Yes'. If it
can store 5PB then I'm damned sure it can easily store up to 2TB! Same goes for files. Badly
worded question!
upvoted 5 times
Joe75
3 months ago
Yes, No, Yes. The limit is 5PB for v2 storage accounts since late 2017.
upvoted 1 times
TakumaK

So the third is No. why is it Yes???
upvoted 1 times
Massy
3 months ago
so the third is no...
upvoted 1 times
Question #73Topic 1
HOTSPOT -
select No.
Hot Area:
Correct
Answer:
Box 1: No -
Not all Azure regions support availability zones.
Box 2: No -
Regions that support availability zones support Linux virtual machines.
Box 3: Yes -
Azure region. Each zone is made up of one or more datacenters equipped with
independent power, cooling, and networking. To ensure resiliency, there‫ג‬€™s a
failures. Zone-redundant services replicate your applications and data across
Availability Zones to protect from single-points-of-failure. With Availability
Zones, Azure offers industry best 99.99% VM uptime SLA.
References:
https://docs.microsoft.com/en-gb/azure/availability-zones/az-overview
rrtafe

NO-NO-NO 1-Not every region has multiple Availability Zone. Some regions may have only one
Availability Zone. 2-One can run both Linux and Windows virtual machines created in the
availability zone. 3-Availability zones are used to replicate data and applications in the same
region.
upvoted 43 times
Pamban
3 weeks, 6 days ago

agree with answer. but could you please further elaborate the explanation of 1st question? there
is no way for us to make availability zones. doesn't matter how many AZs per region.
upvoted 1 times
TEE_B

Thank you for this explanation
upvoted 1 times
RSMCT2011

https://docs.microsoft.com/en-us/azure/availability-zones/az-overview Availability Zones is a
high-availability offering that protects your applications and data from datacenter failures.
Availability Zones are unique physical locations within an Azure region. Each zone is made up of
one or more datacenters equipped with independent power, cooling, and networking.
upvoted 10 times
Gerardo1971

Correct answer
upvoted 1 times
ExamDen

Correct answer is No because Availability zones are used to replicate data and applications in
the same region and not multiple regions.
upvoted 2 times
panal

Given Answer is correct.
upvoted 1 times
TakumaK

Which one? the answers in the picture or in the explain?
upvoted 1 times
Nilvam
2 weeks, 4 days ago

Picture
upvoted 1 times
panal

Answer is correct
upvoted 2 times
inf
4 months ago
No, No, No (Answer is correct) - No - Not all regions have AZs - try Greece, India, Chile (Jan
2021) - https://azure.microsoft.com/en-us/global-infrastructure/geographies/ - No - Obviously -
No - AZs are within the same region - thus replicating data across regions is incorrect
upvoted 1 times
pupi08

#3 --> false because the keyword is "multiple" reagions instead the availability zones are used
to replicate data and applications in the "same" region.
upvoted 1 times
NaruAV

Zone-redundant services replicate your applications and data across Availability Zones to
protect from single-points-of-failure. 3rd choice is Yes.
upvoted 1 times
LLINO

YES, NO, NO, First and Second: https://docs.microsoft.com/en-
us/azure/storage/common/storage-redundancy Third: https://docs.microsoft.com/en-
us/azure/storage/common/scalability-targets-standard-
account?toc=/azure/storage/blobs/toc.json
upvoted 2 times
Angela4643

So the reason all three is no, is because not all regions have the same services or are set up the
same across all zones?
upvoted 1 times
kjon16

Not every region has multiple Availability Zone. Some regions may have only one Availability
Zone. One can run both Linux and Windows virtual machines created in the availability zone.
Availability zones are used to replicate data and applications in the same region
upvoted 1 times
jhpe

Availability zones aren’t available in all Azure regions, nor are they available for all Azure services
in regions that support them. For the most up-to-date list of availability zone-enabled regions
and services, see https://bit.ly/az900-azones. Availability zones provide high-availability and fault
tolerance, but they might not help you with disaster recovery. Currently, availability zones are
supported with the following Azure services. Windows virtual machines,Linux virtual
machines,Virtual Machine Scale Sets,Azure Kubernetes Service,Managed disks,Zone-redundant
storage,Standard Load Balancer,Standard IP address,VPN Gateway,ExpressRoute
Gateway,Application Gateway V2Azure Firewall Azure Data Explorer,Azure SQL Database,Azure
Cache for Redis,Azure Cosmos DB,Event Hubs,Service Bus (Premium tier),Event Grid,Azure AD
Domain Services,App Service Environments ILB
upvoted 1 times
catchlisha

For Q3- the key word is "multiple" regions. Availability zones are used to replicate data and
applications in the same region and not multiple regions. So the answer for Q3 is No.
upvoted 3 times
sumitsvy
7 months ago
No, for all three options.
upvoted 1 times
Cloudyuga

Correct all three are No
upvoted 1 times
kkraz104na
Why is availability zone used to replicate applications and data in multiple Regions wrong?
upvoted 1 times
kilowd

not across multiple regions..It must be within a region where availability zones are enabled..Not
all regions have availability zones enabled
upvoted 2 times
MjMumbai

this is the core purpose of availability zone, they meant for DR.
upvoted 1 times
Question #74Topic 1
HOTSPOT -
select No.
Hot Area:
Correct
Answer:
Box 1: No -
North America has several Azure regions, including West US, Central US, South
Central US, East Us, and Canada East.
Box 2: Yes -
A region is a set of datacenters deployed within a latency-defined perimeter and
connected through a dedicated regional low-latency network.
Box 3: No -
Outbound data transfer is charged at the normal rate and inbound data transfer is free.
References:
https://azure.microsoft.com/en-us/global-infrastructure/regions/
https://azure.microsoft.com/en-us/pricing/details/bandwidth/
hercu

Q1 - No, Q2 - No, Q3 - No. Q2 Explanatiion: “Simply put, an Azure Region is a set of Datacenters
that are connected through a dedicated low-latency network. How many datacenters does a
region contain. Well, we do not have a fixed number. It varies. There are regions of different
sizes. A Region could be made up of just 1 dataceneter or multiple datacenters. The point is, an
Azure Region is a group of one or more Azure Datacenters.” References:
https://www.pragimtech.com/blog/azure/azure-regions-and-paired-regions/
upvoted 23 times
Pinscher

Q2 Should be No: "A region is a geographical area on the planet containing at least one, but
potentially multiple datacenters that are nearby and networked together with a low-latency
network".
upvoted 10 times
rich2508

Regions A region is a set of datacenters deployed within a latency-defined perimeter and
connected through a dedicated regional low-latency network. https://docs.microsoft.com/en-
upvoted 1 times
Gerardo1971
2 weeks, 2 days ago

No,No,No. Explanation: it's difficult to interpret because in Microsoft there are different
definitions. Here -> https://docs.microsoft.com/en-us/learn/modules/azure-architecture-
fundamentals/regions-availability-zones Azure Region: A region is a geographical area on the
planet that contains at least ONE but potentially multiple datacenters Availability zones: Each
availability zone is made up of ONE or more datacenters but here ->
https://docs.microsoft.com/en-us/azure/availability-zones/az-overview#regions Availability
Zones: Each zone is made up of one or more datacenters equipped with independent power,
cooling, and networking. To ensure resiliency, there's a minimum of three separate zones in all
enabled regions. The key I believe is "enabled regions", it can be "not enabled regions" which
less than three separate zones like only ONE.
upvoted 1 times
aztrain
2 weeks, 5 days ago

Availability Zones are unique physical locations within an Azure region. Each zone is made up of
one or more datacenters equipped with independent power, cooling, and networking. To ensure
resiliency, there's a minimum of three separate zones in all enabled regions.
https://docs.microsoft.com/en-us/azure/availability-zones/az-
overview#:~:text=Availability%20Zones%20are%20unique%20physical,zones%20in%20all%20en
abled%20regions.
upvoted 1 times
Pamban
3 weeks ago
upvoted 1 times
CodePoet

Q2 is confusing, an Azure region may have multiple datacenters but not every Azure region has
multiple datacenters. So which is applicable here?
upvoted 1 times
Acredser

The reason for my misunderstanding is that not all regions "support" Availability Zones?
https://azure.microsoft.com/en-us/global-infrastructure/geographies/ From the map it list the
"Availability Zones Available", which implies that not all regions have availability option?
upvoted 2 times
Acredser

For Q2: "Every Azure region has multiple datacenters". I thought this was for Azure Availability
Zones?
upvoted 2 times
Acredser

Ok, yeah, forget about the Availability Zone. But "A region is a geographical area on the planet
that contains at least one but potentially multiple datacenters that are nearby and networked
together with a low-latency network. Azure intelligently assigns and controls the resources
within each region to ensure workloads are appropriately balanced." At least one, meaning it
does not always contains multiple? Or am I missing something, this really bugs me. Reference:
https://docs.microsoft.com/en-us/learn/modules/azure-architecture-fundamentals/regions-
availability-zones
upvoted 4 times
Arrakis
3 months ago
An Availability Zone is a high-availability offering that protects your applications and data from
datacenter failures. Availability Zones are unique physical locations within an Azure region. An
Azure Region is made out of multiple Availability Zones, that make an Azure Region have
multiple physical datacentres.
upvoted 5 times
lemonpowah
3 months ago
A region is a set of datacenters as per: https://docs.microsoft.com/en-us/azure/availability-
zones/az-overview#regions A region has a minimum of 3 Availability Zones and an Availability
zone has one or multiple datacenters
upvoted 15 times
myskypeid1313
3 weeks, 2 days ago

Brilliant find!
upvoted 1 times
Pamban
4 weeks ago
Exactly correct your second point. in that case, the answer is No No No because 2nd statement
says Every Azure region has multiple datacenters which is wrong. A region is a geographical area
on the planet that contains at least one but potentially multiple datacenters that are nearby and
networked together with a low-latency network. Azure intelligently assigns and controls the
resources within each region to ensure workloads are appropriately balanced.
upvoted 1 times
IAmAFighterGal
1 month ago
Can you pls confirm if the answers are correct? To me it looks right.
upvoted 3 times
Question #75Topic 1
Solution: You deploy the virtual machines to two or more scale sets.
• A. Yes
• B. No
Correct Answer: B
This answer does not specify that the scale set will be configured across multiple data
centers so this solution does not meet the goal.
Azure virtual machine scale sets let you create and manage a group of load balanced
VMs. The number of VM instances can automatically increase or decrease in response
to demand or a defined schedule. Scale sets provide high availability to your
applications, and allow you to centrally manage, configure, and update many VMs.
Virtual machines in a scale set can be deployed across multiple update domains and
fault domains to maximize availability and resilience to outages due to data center
outages, and planned or unplanned maintenance events.
Reference:
PRT

An availability set is a logical grouping of VMs within a datacenter. You will have to use
availability zones. Hence B answer.
upvoted 83 times
roanbaga

No, an Availability sets divide in two: Update Domains (Logical) and Fault Domains (Physicals).
upvoted 9 times
Rooks
1 year ago
No such thing called availability set - it is skate set. The answer is B.
upvoted 5 times
foreverlearner
1 year ago
It is a thing: "An availability set is a logical grouping of two or more VMs (on different racks
inside the same Datacenter) that help keep your application available during planned or
unplanned maintenance. ". However, they wouldn't be helpful neither in this scenario, you would
need to deploy the VMs in 2 different AZs
upvoted 19 times
Himanshu27
10 months ago
I Agree... VMs must be in two or more scale-sets but those scale-sets must be in different
datacenters in same or different availability zones..(as per leow text on MSDN >Scale sets are
used to run multiple instances of your application. If one of these VM instances has a problem,
customers continue to access your application through one of the other VM instances with
minimal interruption. >For additional availability, you can use Availability Zones to automatically
distribute VM instances in a scale set within a single datacenter or across multiple datacenters.)
upvoted 3 times
Rooks
1 year ago
Sorry typo - meant Scale Set
upvoted 2 times
Rooks
1 year ago
Sorry again— there’s indeed such thing called Availability Sets. Too many things with Sets : - )
apologies for confusion..
upvoted 11 times
Smikky
4 months ago
They didn't mention availability sets, they mentioned scale set i.ei. VM scale set. It lets you create
and manage group of identical VMs. Scale sets are not for fault tolerance but more for
management.
upvoted 2 times
Moon

answer is "No / B". Virtual Machine Scale Sets let you create and manage a group of identical,
load balanced VMs. The number of VM instances can automatically increase or decrease in
response to demand or a defined schedule. What provide Data Center fault tolerant, is
"Availability Set".
upvoted 21 times
thomasemr

Availability Zones.
upvoted 4 times
panal
Most Recent 3 months, 2 weeks ago

B is correct answer
upvoted 2 times
nigeldmgriffith

No ==> Scale sets refer to a group of VMs within a datacenter therefore it cannot address a
datacenter failure.
upvoted 3 times
NaruAV

Availability Zone is the best sol.
upvoted 2 times
SNTala

https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/overview
upvoted 1 times
Kiry
5 months ago
upvoted 1 times
Tan10

this requires "Availability set" and not scale set, hence answer should be B
upvoted 1 times
smaulen

answer is B Provides high availability and application resiliency Scale sets are used to run
multiple instances of your application. If one of these VM instances has a problem, customers
continue to access your application through one of the other VM instances with minimal
interruption. For additional availability, you can use Availability Zones to automatically distribute
VM instances in a scale set within a single datacenter or across multiple datacenters.
upvoted 1 times
yaw255

I failed today, 75%of the questions are not here
upvoted 3 times
KTrout

Are these questions that off? Others claim that these are on point. I am scheduled to take my
exam tomorrow.
upvoted 1 times
Franco11
1 week, 5 days ago

How was it ? i Planned my exam 2 days from now
upvoted 1 times
fanco
6 months ago
B is correct. Because Scale sets allow you to centrally manage, configure, and update a large
number of VMs in minutes to provide highly available applications not about downtime.
upvoted 1 times
zebra123

Automatic distribution of VM instances across Availability Zones or Availability Sets
https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/overview Answer A
upvoted 1 times
zebra123

Azure virtual machine scale sets let you create and manage a group of identical, load balanced
VMs. Hence A.
upvoted 2 times
dadageer

The answer is B as it does not mentioned about Availability Zones. Scale sets can be in same DC
so if that fails and you don't have AZ then there is no HA. Not all Regions have AZs so that
means only Scale sets will not provide you HA. https://docs.microsoft.com/en-us/azure/virtual-
machine-scale-sets/overview
upvoted 3 times
maheshwariravi
8 months ago
Availability Zones will solve the issue
upvoted 2 times
veer03

B is correct answer as availability set is for within datacenter.
upvoted 1 times
XRiddlerX

Answer is B: According to the documentation: Provides high availability and application
resiliency - Scale sets are used to run multiple instances of your application. If one of these VM
instances has a problem, customers continue to access your application through one of the
other VM instances with minimal interruption. - For additional availability, you can use
Availability Zones to automatically distribute VM instances in a scale set within a single
datacenter or across multiple datacenters. https://docs.microsoft.com/en-us/azure/virtual-
machine-scale-sets/overview
upvoted 3 times
Question #76Topic 1
You need to be notified when Microsoft plans to perform maintenance that can affect
the resources deployed to an Azure subscription.
What should you use?
• A. Azure Monitor
• B. Azure Service Health
• C. Azure Advisor
• D. Microsoft Trust Center
Correct Answer: B
Azure Service Health provides a personalized view of the health of the Azure services
and regions you're using. This is the best place to look for service impacting
communications about outages, planned maintenance activities, and other health
advisories because the authenticated Service Health experience knows which services
and resources you currently use.
Reference:
https://docs.microsoft.com/en-us/azure/service-health/overview
AhamBrahmasmi

Azure Service Health is the right answer !
upvoted 6 times
Question #77Topic 1
DRAG DROP -
Match the Azure Services service to the correct description.
Instructions: To answer, drag the appropriate service from the column on the left to its
description on the right. Each service may be used once, more than once, or not at all.
Select and Place:
Correct
Answer:
Reference:
https://docs.microsoft.com/en-us/azure-sphere/product-overview/what-is-azure-sphere
https://docs.microsoft.com/en-us/azure/iot-central/core/overview-iot-central
https://docs.microsoft.com/en-us/azure/iot-hub/about-iot-hub
safaa
1 week, 5 days ago

correct
upvoted 2 times
Quen
1 week, 6 days ago

https://docs.microsoft.com/en-us/learn/modules/azure-iot-strategy-and-solutions/4-azure-iot-
services
upvoted 1 times
Droplex
1 week, 6 days ago

Correct
upvoted 1 times
toarunps
2 weeks, 1 day ago

This is the correct answer
upvoted 2 times
Tony3i3
2 weeks, 2 days ago

Correct
upvoted 1 times
Question #78Topic 1
HOTSPOT -
select No.
Hot Area:
Correct
Answer:
Reference:
https://docs.microsoft.com/en-us/azure/virtual-desktop/overview
fuddyduddy
1 day, 18 hours ago

Answer is correct (N,N,Y) 1. NO - Supported O/Ses are Windows 10 Enterprise multi-session or
Windows 10 Enterprise, Windows 7 Enterprise, Windows Server 2012 R2, 2016, 2019. See
https://docs.microsoft.com/en-us/azure/virtual-desktop/overview#requirements 2. NO - For
Max session limit, enter the maximum number of users you want load-balanced to a single
session host. See https://docs.microsoft.com/en-us/azure/virtual-desktop/create-host-pools-
azure-marketplace#begin-the-host-pool-setup-process and https://docs.microsoft.com/en-
us/windows-server/remote/remote-desktop-services/virtual-machine-
recs?context=/azure/virtual-desktop/context/context#recommended-vm-sizes-for-standard-or-
larger-environments 3. YES- Via RemoteApps See https://docs.microsoft.com/en-
us/azure/virtual-desktop/manage-app-groups
upvoted 4 times
Alexandersss

correct
upvoted 1 times
Franco11
1 week, 5 days ago

This Topics were not in the Learning Lesson
upvoted 2 times
anirban7172
1 week, 5 days ago

Is this Answer correct
upvoted 2 times
Question #79Topic 1
HOTSPOT -
Hot Area:
Correct
Answer:
Reference:
https://blog.abouttmc.com/azure-cloud-total-cost-of-ownership
Question #80Topic 1
HOTSPOT -
Hot Area:
Correct
Answer:
Azure Resource Manager templates provides a common platform for deploying objects
to a cloud infrastructure and for implementing consistency across the
Azure environment.
Azure policies are used to define rules for what can be deployed and how it should be
deployed. Whilst this can help in ensuring consistency, Azure policies do not provide the
common platform for deploying objects to a cloud infrastructure.
Reference:
Huawei_55

Correct answer - ARM is just a template for deployment , policy/policies are just the rules that
you can create and apply -you cannot use a rule to deploy - you use a common platform-ARM
upvoted 2 times
pprajapa

I think the keywords are platform and deploy. Policies do not help deploy items with Azure but
ARM with templates allows us to do that. So ARM with Templates should be the right answer.
upvoted 1 times
rich2508
1 week ago
azure Policies Common use cases for Azure Policy include implementing governance for
resource consistency, regulatory compliance, security, cost, and management.
upvoted 1 times
Kmaaaan
1 week, 4 days ago
Answer is correct. "Why choose ARM templates? Repeatable results: Repeatedly deploy your
infrastructure throughout the development lifecycle and have confidence your resources are
deployed in a consistent manner. Templates are idempotent, which means you can deploy the
same template many times and get the same resource types in the same state."
https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/overview
upvoted 1 times
toniiiy
1 week, 4 days ago

I found the similar question, and there's no choose of A, so the answer will not be A
upvoted 1 times
safaa
1 week, 5 days ago

wroong Should be Azure policies
upvoted 1 times
CARIOCA
1 month, 1 week ago

This question is very divided the feedback after all what would be the answer and what is the
justification?
upvoted 1 times
xSohox

The correct one is "Azure Resource Manager" only, without "template".
upvoted 1 times
panal

Answer Is Correct.
upvoted 3 times
ShawnKW
Stop saying correct for each questions. You should provide reference for justification. Moderator
should block this guy.
upvoted 24 times
Question #81Topic 1
DRAG DROP -
Match the Azure service to the correct description.
Instructions: To answer, drag the appropriate Azure service from the column on the left
to its description on the right. Each service may be used once, more than once, or not at
all.
Select and Place:
Correct
Answer:
Box 1:
Azure Bot Services provides a digital online assistant that provides speech support.
Bots provide an experience that feels less like using a computer and more like dealing
with a person - or at least an intelligent robot. They can be used to shift simple,
repetitive tasks, such as taking a dinner reservation or gathering profile information, on
to automated systems that may no longer require direct human intervention. Users
converse with a bot using text, interactive cards, and speech. A bot interaction can be a
quick question and answer, or it can be a sophisticated conversation that intelligently
provides access to services.
Box 2:
Azure Machine Learning uses past trainings to provide predictions that have high
probability.
Machine learning is a data science technique that allows computers to use existing data
to forecast future behaviors, outcomes, and trends. By using machine learning,
computers learn without being explicitly programmed.
Forecasts or predictions from machine learning can make apps and devices smarter.
For example, when you shop online, machine learning helps recommend other products
you might want based on what you've bought.
Box 3:
Azure Functions provides serverless computing functionalities.
Azure Functions is a serverless compute service that lets you run event-triggered code
without having to explicitly provision or manage infrastructure.
Box 4:
IoT Hub (Internet of things Hub) provides data from millions of sensors.
IoT Hub is a managed service, hosted in the cloud, that acts as a central message hub
for bi-directional communication between your IoT application and the devices it
manages. You can use Azure IoT Hub to build IoT solutions with reliable and secure
communications between millions of IoT devices and a cloud- hosted solution backend.
You can connect virtually any device to IoT Hub.
References:
https://docs.microsoft.com/en-us/azure/bot-service/bot-service-overview-
introduction?view=azure-bot-service-4.0 https://docs.microsoft.com/en-
us/azure/machine-learning/overview-what-is-azure-ml https://docs.microsoft.com/en-
us/azure/azure-functions/ https://docs.microsoft.com/en-us/azure/iot-hub/about-iot-hub
sarangsupekar1
2 weeks, 6 days ago

correct
upvoted 3 times
shanibpatel
3 weeks, 2 days ago

correct
upvoted 1 times
Kavitw
4 weeks ago
correct
upvoted 4 times
km_cloud
2 months ago
correct answer
upvoted 2 times
panal

Correct Answer.
upvoted 4 times
Question #82Topic 1
An Azure administrator plans to run a PowerShell script that creates Azure resources.
You need to recommend which computer configuration to use to run the script.
Solution: Run the script from a computer that runs Windows 10 and has the Azure
PowerShell module installed.
• A. Yes
• B. No
Correct Answer: A
A PowerShell script is a file that contains PowerShell cmdlets and code. A PowerShell
script needs to be run in PowerShell.
In this question, the computer has the Azure PowerShell module installed. Therefore,
this solution does meet the goal.
References:
https://docs.microsoft.com/en-us/powershell/scripting/components/ise/how-to-write-and-
run-scripts-in-the-windows-powershell-ise?view=powershell-6
alpha

Isn't Azure CLI required ?
upvoted 6 times
Cornelius1234
1 week, 5 days ago

No. Azure Powershell and Azure CLI are 2 different things. Their functionality is very similar,
however one uses Powershell syntax, while Azure CLI uses bash syntax.
upvoted 2 times
Maharba

Well, it was stated that some of these questions can have multiple answers. So I think both this
option and using the Azure CLI are correct
upvoted 2 times
toniiiy
1 week, 4 days ago

Correct Answer: A. Yes. Explanation: A PowerShell script is a file that contains PowerShell cmdlets
and code. A PowerShell script needs to be run in PowerShell.
upvoted 1 times
OmVerma
2 weeks, 2 days ago

Is it necessary to have windows 10?
upvoted 2 times
MaximeHU
2 weeks, 4 days ago

previous question says the exact contrary i'm confused
upvoted 1 times
CRP098274
3 weeks, 1 day ago

Correct Answer: A A PowerShell script is a file that contains PowerShell cmdlets and code. A
PowerShell script needs to be run in PowerShell. In this question, the computer has the Azure
PowerShell module installed. Therefore, this solution does meet the goal. Im confused the
answer is YES but the explanation said " Therefore, this solution does meet the goal."????
upvoted 1 times
CARIOCA
1 month, 1 week ago

justification?
upvoted 1 times
panal

Correct Answer is Yes
upvoted 3 times
tdasuni001
3 weeks, 2 days ago

It should be Azure CLI. It seems like you go with all these incorrect answers as well
upvoted 1 times
FFlores
3 months ago
I think is NO because the AZURE CLI is required.
upvoted 1 times
Amitbbsr

Azure CLI installation is required, else it will show invalid command.
upvoted 1 times
hf443
3 months ago
Nop, it is not required. You can isntall Azure PowerShell module and use its syntax to create any
resource. See documentation: https://docs.microsoft.com/en-
us/azure/storage/common/storage-account-create?tabs=azure-powershell
upvoted 6 times
panal

I agree.
upvoted 1 times
hf443
3 months ago
Thus, is yes.
upvoted 2 times
Question #83Topic 1
DRAG DROP -
all.
Select and Place:
Correct
Answer:
Box 1:
Azure virtual machines provide operation system virtualization.
Azure Virtual Machines (VM) is one of several types of on-demand, scalable computing
resources that Azure offers. Typically, you choose a VM when you need more control
over the computing environment than the other choices offer.
Box 2:
Azure Container Instances provide portable environments for virtualized applications.
Containers are becoming the preferred way to package, deploy, and manage cloud
applications. Azure Container Instances offers the fastest and simplest way to run a
container in Azure, without having to manage any virtual machines and without having
to adopt a higher-level service.
Containers offer significant startup benefits over virtual machines (VMs). Azure
Container Instances can start containers in Azure in seconds, without the need to
provision and manage VMs.
Box 3:
Azure App Service is used to build, deploy and scale web apps.
Azure App Service is a platform-as-a-service (PaaS) offering that lets you create web
and mobile apps for any platform or device and connect to data anywhere, in the cloud
or on-premises. App Service includes the web and mobile capabilities that were
previously delivered separately as Azure Websites and Azure Mobile
Services.
Box 4:
Azure Functions provide a platform for serverless code.
References:
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/overview
https://docs.microsoft.com/en-us/azure/security/fundamentals/paas-applications-using-
app-services https://docs.microsoft.com/en-us/azure/azure-functions/
https://docs.microsoft.com/en-us/azure/container-instances/container-instances-
overview
hercu

Given asnwer is wrong! Be careful! Correct answers are as follows: Box 1 - Azure Container
Instances "A container virtualizes the underlying OS and causes the containerized app to
perceive that it has the OS." Source: https://azure.microsoft.com/en-us/overview/what-is-a-
container/ Note: Virtual Machines virtualize underlying hardware - not the OS! - so that multiple
operating system (OS) instances can run on the hardware. Box 2 is Azure Virtual Machines
"Another application of the VM is to provide the property of machine independence. This form,
called application (or process) virtualization, creates an abstracted environment (for an
application), making it independent of its physical environment. In addition to creating a
portable environment in which to execute the object code, application virtualization provides an
environment in which to isolate the VM from other applications running on the host." Source:
https://www.ibm.com/developerworks/library/l-virtual-machine-architectures/index.html Box 3 -
Azure App Service Box 4 - Azure Functions
upvoted 21 times
freshmaker

answer is correct. container is use for apps. vm is use for OS.
upvoted 4 times
panal

Given Answer is Correct.
upvoted 11 times
lalit10
2 weeks, 1 day ago

Explain it.
upvoted 1 times
Deera
Most Recent 2 days, 1 hour ago

box1- Container Instances ( containers virtualizes the underlying OS)
upvoted 1 times
SSK123456
1 week, 4 days ago

Containers virtualize Operating systems Container instances: light weight virtualized application
environments
upvoted 1 times
tjay830
2 weeks, 2 days ago

box1, container box2, virtual machines box3: Azure app service box4: Azure functions
upvoted 3 times
anju1980
3 weeks ago
Box 1: Container A container virtualizes the underlying OS and causes the containerized app to
perceive that it has the OS—including CPU, memory, file storage, and network connections—all
to itself. https://azure.microsoft.com/en-us/overview/what-is-a-container/ VMs virtualize the
underlying hardware so that multiple operating system (OS) instances can run on the hardware
upvoted 1 times
Tomsss12345

Containers virtualize Operating systems. But the test may require the wrong answer for the first
question?
upvoted 1 times
sam900100

Azure VM provide hardware virtualization
upvoted 2 times
Edyu

box 1 and 2 should be both azure container instances. https://www.microsoft.com/en-
us/videoplayer/embed/RE2yuaq?postJsllMsg=true
upvoted 5 times
Edyu

on the second thought, azure container instances is different from azure containers. so I would
answer VM for both box 1 and 2.
upvoted 1 times
soumya_
VMs does not virtualize the OS. It virtualizes the hardware. Container virtualizes the OS.
upvoted 3 times
km_cloud
2 months ago
correct answer
upvoted 1 times
kavir
2 months ago
Answer is as per hercu
upvoted 2 times
Question #84Topic 1
Which service provides serverless computing in Azure?
• A. Azure Virtual Machines

• B. Azure Functions
• C. Azure storage account
• D. Azure dedicated hosts
Correct Answer: B
Azure Functions provide a platform for serverless code.
Reference:
https://docs.microsoft.com/en-us/azure/azure-functions/
Alexandersss

correct :)
upvoted 2 times
toniiiy
1 week, 4 days ago

Answer is correct
upvoted 3 times
Question #85Topic 1
You have an Azure subscription named Subscription1. You sign in to the Azure portal
and create a resource group named RG1.
From Azure documentation, you have the following command that creates a virtual
machine named VM1. az vm create --resource-group RG1 --name VM1 --image
UbuntuLTS --generate-ssh-keys
You need to create VM1 in Subscription1 by using the command.
Solution: From the Azure portal, launch Azure Cloud Shell and select Bash. Run the
command in Cloud Shell.
• A. Yes
• B. No
Correct Answer: A
The command can be run in the Azure Cloud Shell.
The Azure Cloud Shell is a free interactive shell. It has common Azure tools preinstalled
and configured to use with your account.
To open the Cloud Shell, just select Try it from the upper right corner of a code block.
You can also launch Cloud Shell in a separate browser tab by going to
https://shell.azure.com/bash.
References:
https://docs.microsoft.com/en-us/azure/virtual-machines/linux/quick-create-cli
tjay830
2 weeks, 2 days ago

correct
upvoted 2 times
shanibpatel
3 weeks, 2 days ago

correct
upvoted 2 times
panal

Answer is correct
upvoted 3 times
Question #86Topic 1
Your company has several business units.
Each business unit requires 20 different Azure resources for daily operation. All the
business units require the same type of Azure resources.
You need to recommend a solution to automate the creation of the Azure resources.
What should you include in the recommendations?
• A. Azure Resource Manager templates

• B. virtual machine scale sets
• C. the Azure API Management service
• D. management groups
Correct Answer: A
You can use Azure Resource Manager templates to automate the creation of the Azure
resources. Deploying resource through templates is known as
‫ג‬€˜Infrastructure as code‫ג‬€™.
To implement infrastructure as code for your Azure solutions, use Azure Resource
Manager templates. The template is a JavaScript Object Notation (JSON) file that
defines the infrastructure and configuration for your project. The template uses
declarative syntax, which lets you state what you intend to deploy without having to
write the sequence of programming commands to create it. In the template, you specify
the resources to deploy and the properties for those resources.
References:
https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/overview
ArSung
Highly Voted1 year, 5 months ago

My teacher the A is correct answer
upvoted 14 times
knoor

different resources, not VMs only. So A is correct as ARM templates are for every resource type.
upvoted 6 times
Gerardo1971

Correct answer
upvoted 1 times
panal

Answer is correct
upvoted 2 times
panal

The correct Answer is A
upvoted 2 times
fspellet

A. Templates makes sense because when you think of a template, it's a resouce that is going to
be used to copy things over and over and over. A good example of templates would be the
ones in MS Word: resumes, letters, that are prefilled so you can customize easily instead of
having to recreate the same thing over and over.
upvoted 2 times
Tan10

A is correct as the tasks needs to be repetitive.
upvoted 2 times
CloudBoss

correct is A
upvoted 3 times
WIS
11 months ago
Why not Azure Blueprint?
upvoted 4 times
pranayamr

its part of governance , and blueprint includes = resource group, arm template, policy and Rbac
, but question is about 20 different resource is not talking about compliance or role assignment
so that why no blueprint
upvoted 1 times
iluv

ok \\
upvoted 1 times
tpascal
1 year, 1 month ago

it is A
upvoted 1 times
burman84
1 year, 1 month ago

Key words for me here was "same type". Azure Resource Manager uses templates for
consistency. S
upvoted 2 times
Sjn9

A is the right answer - ARM templates
upvoted 2 times
mudot
templates give you the ability to recreate things, gives consistency
upvoted 4 times
ppp131176

https://docs.microsoft.com/en-us/azure/azure-resource-manager/template-deployment-
overview
upvoted 5 times
Anka_Do

I'm wondering why it's not Management groups - D? I woudl rather choose D.
upvoted 1 times
Gbala
12 months ago
management groups are for managing different subscriptions ... it has nothing to do with
resources..
upvoted 5 times
kilowd
1 year, 1 month ago

ARM is correct..Templates are idempotent, which means you can deploy the same template
many times and get the same resource types in the same state.
upvoted 22 times
keshjar

"Idempotent" a good meaning to learn thanks brother
upvoted 13 times
dorhost

Management groups do not automate the creation of the resources.
upvoted 13 times
Question #87Topic 1
DRAG DROP -
Match the Azure service to the correct definition.
all.
Select and Place:
Correct
Answer:
Box 1:
Azure Functions provides the platform for serverless code.
Box 2:
Azure Databricks is a big analysis service for machine learning.
Azure Databricks is an Apache Spark-based analytics platform. The platform consists of
several components including ‫ג‬€˜MLib‫ג‬€™. Mlib is a Machine Learning library
consisting of common learning algorithms and utilities, including classification,
regression, clustering, collaborative filtering, dimensionality reduction, as well as
underlying optimization primitives.
Box 3:
Azure Application Insights detects and diagnoses anomalies in web apps.
Application Insights, a feature of Azure Monitor, is an extensible Application
Performance Management (APM) service for developers and DevOps professionals.
Use it to monitor your live applications. It will automatically detect performance
anomalies, and includes powerful analytics tools to help you diagnose issues and to
understand what users actually do with your app.
Box 4:
Azure App Service hosts web apps.
Azure App Service is an HTTP-based service for hosting web applications, REST APIs,
and mobile back ends. You can develop in your favorite language, be it
.NET, .NET Core, Java, Ruby, Node.js, PHP, or Python. Applications run and scale with
ease on both Windows and Linux-based environments.
References:
https://docs.microsoft.com/en-us/azure/azure-functions/
https://docs.microsoft.com/en-us/azure/azure-databricks/what-is-azure-
databricks#apache-spark-based-analytics-platform https://docs.microsoft.com/en-
us/azure/azure-monitor/app/app-insights-overview https://docs.microsoft.com/en-
us/azure/app-service/overview
Ravidv11

Serverless ---> Functions big data analysis ---> databricks anomalies ---> Insights Host --->
App Service
upvoted 32 times
abosafi87

Serverless ---> Functions big data analysis ---> databricks anomalies ---> Insights Host --->
App Service
upvoted 11 times
Gerardo1971

Correct answer
upvoted 1 times
Chief
3 weeks, 6 days ago

Application Insights, a feature of Azure Monitor, is an extensible Application Performance
Management (APM) service for developers and DevOps professionals. Use it to monitor your live
applications. It will automatically detect performance anomalies, and includes powerful analytics
tools to help you diagnose issues and to understand what users actually do with your app. It's
designed to help you continuously improve performance and usability.
upvoted 1 times
Kavitw
4 weeks ago
correct
upvoted 1 times
panal

Answer is correct
upvoted 1 times
panal

Correct answer
upvoted 1 times
CSSJ

CORRECT
upvoted 1 times
CloudBoss

answers is correct
upvoted 1 times
Yog123

Corrct
upvoted 1 times
SagarShete
1 year ago
Correct answer
upvoted 1 times
tpascal
1 year, 1 month ago

it is correct
upvoted 5 times
GabrielD

https://docs.microsoft.com/en-us/azure/azure-databricks/what-is-azure-databricks
upvoted 3 times
Question #88Topic 1
A team of developers at your company plans to deploy, and then remove, 50
customized virtual machines each week. Thirty of the virtual machines run Windows
Server 2016 and 20 of the virtual machines run Ubuntu Linux.
You need to recommend which Azure service will minimize the administrative effort
required to deploy and remove the virtual machines.
• A. Azure Reserved Virtual Machines (VM) Instances

• B. Azure virtual machine scale sets
• C. Azure DevTest Labs
• D. Microsoft Managed Desktop
Correct Answer: C
DevTest Labs creates labs consisting of pre-configured bases or Azure Resource
Manager templates.
By using DevTest Labs, you can test the latest versions of your applications by doing
the following tasks:
✑ Quickly provision Windows and Linux environments by using reusable templates and
artifacts.
✑ Easily integrate your deployment pipeline with DevTest Labs to provision on-demand
environments.
✑ Scale up your load testing by provisioning multiple test agents and create pre-
provisioned environments for training and demos.
Reference:
https://docs.microsoft.com/en-us/azure/lab-services/devtest-lab-overview
julmal8

keyword here is developer
upvoted 88 times
PhilB1000

Thanks. I missed that the fist time!
upvoted 8 times
Ragijo

upvoted 22 times
t213

upvoted 2 times
Gerardo1971
2 weeks, 1 day ago

Correct answer
upvoted 2 times
Kavitw
4 weeks ago
keyword is developer
upvoted 1 times
panal
3 months ago
C is the correct answer.
upvoted 1 times
Sud10
5 months ago
yes indeed. in this question keyword is "developer"
upvoted 1 times
Cappu

This appeared in today's exam - 11/21
upvoted 4 times
bb90

Almost missed the keyword 'Developer'
upvoted 2 times
Mosib

key word, administrative effort, c is correct
upvoted 1 times
drzius5
9 months ago
keyword here is customized VMs as someone above already noticed..
upvoted 1 times
K999K
1 year ago
C is the correct answer. DevTest Labs creates labs consisting of pre-configured bases or Azure
Resource Manager templates. https://docs.microsoft.com/en-us/azure/lab-services/devtest-lab-
overview
upvoted 4 times
argademahesh
1 year ago
Why not ARM templates, but it's not listed ? because of the keyword "customised " But then it
says developer , on weekly basis - so go with DevTestLabs
upvoted 3 times
agape1ne
1 year ago
This question also appears in Udemy test and it says scale tests is the correct answer and it does
say team of developers in the question as does this one.
upvoted 2 times
undisclosed
1 year ago
Scale sets would be for identical virtual machines, but it specifies that they are 'customized'.
upvoted 8 times
kilowd
1 year, 1 month ago

Azure DevTest Labs enables developers on teams to efficiently self-manage virtual machines
(VMs) and PaaS resources without waiting for approvals.
upvoted 20 times
Spenceavfc

3rd time reading one I spot the key word..developer :-)
upvoted 4 times
Question #89Topic 1
A support engineer plans to perform several Azure management tasks by using the
Azure CLI.
You install the CLI on a computer.
You need to tell the support engineer which tools to use to run the CLI.
Which two tools should you instruct the support engineer to use? Each correct answer
presents a complete solution.
• A. Command Prompt
• B. Azure Resource Explorer
• C. Windows PowerShell
• D. Windows Defender Firewall
• E. Network and Sharing Center
Correct Answer: AC
For Windows the Azure CLI is installed via an MSI, which gives you access to the CLI
through the Windows Command Prompt (CMD) or PowerShell.
References:
https://docs.microsoft.com/en-us/cli/azure/install-azure-cli-windows?view=azure-cli-
latest
jesudass

Answer A and C .. are correct
upvoted 17 times
ArunVasu

Instead of Command Prompt, if Option like Azure CLI, then it will be more clear.
upvoted 11 times
Gerardo1971

Correct answer
upvoted 1 times
freshmaker
if windows is command prompt, mac is terminal.
upvoted 1 times
panal
3 months ago
Answer A and C .. are correct
upvoted 1 times
rfelipem

A and C For Windows, the Azure CLI is installed via a MSI, which gives you access to the CLI
through the Windows Command Prompt (CMD) or PowerShell. https://docs.microsoft.com/en-
us/cli/azure/install-azure-cli-windows?tabs=azure-cli
upvoted 3 times
usr92
5 months ago
Why does PowerShell need to be installed for CLI to run? I thought they were similar but
separate?
upvoted 3 times
Urpiano

Why command prompt or bash need to be installed for CLI to run? Azure CLI installs
tools/commands to be executed from command line (cmd or bash) or from PowerShell
(Windows PowerShell or PowerShell Core)
upvoted 1 times
IndB

Doesn’t the powershell needs installation? Question said only CLI is installed.
upvoted 1 times
rakeshjoshi
A and C
upvoted 1 times
Saipm
9 months ago
Azure CLI is Azure Command Line Interface. I found the below link informative for beginner like
me https://docs.microsoft.com/en-us/cli/azure/what-is-azure-cli?view=azure-cli-latest
upvoted 4 times
Jeralds

Correct
upvoted 1 times
rrtafe

An open-source cross-platform version of PowerShell, called PowerShell Core 6.0, has been
released by Microsoft that not only runs on Windows, but runs on macOS and Linux as well
upvoted 1 times
ShoppingBrand

Answer AC. Correct
upvoted 1 times
reyes
1 year ago
Correct AC
upvoted 1 times
azure22
1 year ago
I am so confused with all these CLI, Azure Power Shell, Cloud shell etc etc. Can anyone tells how
many questions are expected on such topic :(
upvoted 9 times
guoliveira

So do I... :( The only thing that I know is that Azure Cloud Shell and Azure Portal can run on a
web-browser. So they can be used even in smarthphones. I am going to take the exam
tomorrow... let's see
upvoted 1 times
kjon16

https://docs.microsoft.com/en-us/azure/cloud-shell/overview CLI and Powershell you can run
from pc. Portal is accessible from browser. And if you want to get the experience like CLI or
Powershell from browser - without installing anything, then from portal - you can launch Cloud
shell where you can write commands.
upvoted 8 times
Yaroslav

it doesn't say anywhere that a PC runs on Windows
upvoted 7 times
kanis10
1 year, 1 month ago

Even Linux , ubuntu supports CLI and powershell
upvoted 9 times
AK72

I agree with Yaroslav. The option says "Windows Powershell" and there is no mention of this
being a Windows PC
upvoted 3 times
Question #90Topic 1
You have an Azure environment. You need to create a new Azure virtual machine from
a tablet that runs the Android operating system.
Solution: You use PowerShell in Azure Cloud Shell.
• A. Yes
• B. No
Correct Answer: A
Azure Cloud Shell is a browser-based shell experience to manage and develop Azure
resources.
Cloud Shell offers a browser-accessible, pre-configured shell experience for managing
Azure resources without the overhead of installing, versioning, and maintaining a
machine yourself.
Being browser-based, Azure Cloud Shell can be run on a browser from a tablet that
runs the Android operating system.
References:
https://docs.microsoft.com/en-us/azure/cloud-shell/features
panal
Highly Voted2 months, 4 weeks ago

Answer is Correct
upvoted 7 times
knowledgeshared

Run commands to manage your Azure resources Want to use the command line? Run ad hoc
Azure CLI or PowerShell commands from the Azure mobile app. https://azure.microsoft.com/en-
us/features/azure-portal/mobile-app/#features
upvoted 1 times
ash0606
1 week, 3 days ago

PowerShell only runs on Linux, window, MacOS.
upvoted 1 times
Question #91Topic 1
Solution: You use the PowerApps portal.
• A. Yes
• B. No
Correct Answer: B
PowerApps lets you quickly build business applications with little or no code. It is not
used to create Azure virtual machines. Therefore, this solution does not meet the goal.
PowerApps Portals allow organizations to create websites which can be shared with
users external to their organization either anonymously or through the login provider of
their choice like LinkedIn, Microsoft Account, other commercial login providers.
References:
https://powerapps.microsoft.com/en-us/blog/introducing-powerapps-portals-powerful-
low-code-websites-for-external-users/
Ali000
2 months ago
is it a portal? if yes should be able to run on the browser, am I right?
upvoted 1 times
Min_Thu

powerapp portal and azure portal are different. the question is using powerapp portal to create
the new vm. we cannot create the vm by using powerapp portal. PowerApps Portals allow
organizations to create websites which can be shared with users external to their organization
either anonymously or through the login provider of their choice like LinkedIn, Microsoft
Account, other commercial login providers.
upvoted 6 times
ForFun

correct
upvoted 1 times
panal

Answer is Correct.
upvoted 3 times
Question #92Topic 1
Solution: You use the Azure portal.
• A. Yes
• B. No
Correct Answer: A
The Azure portal is a web-based, unified console that provides an alternative to
command-line tools. With the Azure portal, you can manage your Azure subscription
using a graphical user interface. You can build, manage, and monitor everything from
simple web apps to complex cloud deployments. Create custom dashboards for an
organized view of resources. Configure accessibility options for an optimal experience.
Being web-based, the Azure portal can be run on a browser from a tablet that runs the
Android operating system.
References:
https://docs.microsoft.com/en-us/azure/azure-portal/azure-portal-overview
Kavitw
4 weeks ago
corrct for portal
upvoted 3 times
panal

Answer is Correct.
upvoted 3 times
Ashwin21

not able to see any discussions
upvoted 1 times
hf443
3 months ago
indeed. It's like most of the discussions were erased.
upvoted 1 times
Massy
3 months ago
it's a recently added question, so yours is the first comment. In addiction, the answer is really
easy so I think there's nothing to discuss...
upvoted 3 times
Question #93Topic 1
Azure Databricks is an Apache Spark-based analytics service.
change is needed.‫ג‬€ If the statement is incorrect, select the answer choice that makes
• A. No change is needed.
• B. Azure Data Factory
• C. Azure DevOps
• D. Azure HDInsight
Correct Answer: A
Azure Databricks is an Apache Spark-based analytics platform. The platform consists of
several components including ‫ג‬€˜MLib‫ג‬€™. Mlib is a Machine Learning library
consisting of common learning algorithms and utilities, including classification,
regression, clustering, collaborative filtering, dimensionality reduction, as well as
underlying optimization primitives.
References:
https://docs.microsoft.com/en-us/azure/azure-databricks/what-is-azure-
databricks#apache-spark-based-analytics-platform
jd94
Highly Voted 1 week, 6 days ago

4/24/2021 Exam. Passed.
upvoted 5 times
Maharba
6 days, 3 hours ago

Congrats! I am writing mine today
upvoted 2 times
sushisalmon
1 week, 4 days ago

congrats! hope i will too.
upvoted 1 times
Franco11
1 week, 4 days ago

Congrats, Hope i will
upvoted 1 times
AniketG

Azure Databricks - A fully managed, fast, easy and collaborative Apache® Spark™ based
analytics platform optimised for Azure https://azure.microsoft.com/en-in/product-
categories/analytics/
upvoted 3 times
cmccron
1 month ago
No change needed is correct.
upvoted 1 times
lakime
1 month ago
HDInsight also provides spark
upvoted 2 times
CARIOCA
1 month, 1 week ago

justification?
upvoted 1 times
excluilucas
1 month, 1 week ago

The phrase "Azure Databricks is an Apache Spark-based analytics service." should be highlighted
with emphasis in "Azure Databricks", so the question is if we should replace "Azure Databricks",
and if yes for what
upvoted 1 times
tianit
1 month, 1 week ago

How is that answer related to the question?
upvoted 1 times
afzndr
1 month, 1 week ago

Azure Databricks is the underlined text, even though it doesn't sow
upvoted 1 times
freshmaker
1 month, 1 week ago
got this q
upvoted 1 times
EricMok
1 month, 1 week ago

Actually, I don't understand the question, what is the relationship between the question and
answers?
upvoted 1 times
cozy101

Agreed.
upvoted 2 times
rashad99

best trainer
upvoted 2 times
Question #94Topic 1
HOTSPOT -
select No.
Hot Area:
Correct
Answer:
Box 1: Yes -
Azure Monitor maximizes the availability and performance of your applications and
services by delivering a comprehensive solution for collecting, analyzing, and acting on
telemetry from your cloud and on-premises environments.
Box 2: Yes -
Alerts in Azure Monitor proactively notify you of critical conditions and potentially
attempt to take corrective action.
Box 3: Yes -
Azure Monitor uses Target Resource, which is the scope and signals available for
alerting. A target can be any Azure resource. Example targets: a virtual machine, a
storage account, a virtual machine scale set, a Log Analytics workspace, or an
Application Insights resource.
References:
https://docs.microsoft.com/en-us/azure/azure-monitor/overview
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/alerts-overview
Salilgen

I think first answer is YES: https://docs.microsoft.com/en-us/azure/azure-monitor/overview I
think second answer is NO. Azure Monitor cannot send alerts (email) to Azure AD security group
but only to Azure AD user: https://docs.microsoft.com/en-us/azure/azure-
monitor/platform/action-groups. I think last answer is YES: https://docs.microsoft.com/en-
us/azure/azure-monitor/platform/alerts-overview
upvoted 22 times
fuddyduddy
1 week, 4 days ago

Second answer is Y. If you read the document from the top you will see that there are 2 types of
email notification: 1. email/push/SMS 2. email ARM Role. Only with the latter is there a
restriction on who you can email. Here is the relevant text: Email ===== Emails will be sent
from the following email addresses. Ensure that your email filtering is configured appropriately
azure-noreply@microsoft.com azureemail-noreply@microsoft.com alerts-
noreply@mail.windowsazure.com You may have a limited number of email actions in an Action
Group. See the rate limiting information article. -----------------------------------------------------
------------------------------------------------------------------- Email Azure Resource Manager
Role ============================== Send email to the members of the
subscription's role. Email will only be sent to Azure AD user members of the role. Email will not
be sent to Azure AD groups or service principals. A notification email is sent only to the primary
email address.
upvoted 3 times
Kennxfc
1 month ago
Email will only be sent to Azure AD user members of the role. Email will not be sent to Azure AD
groups or service principals. You're very correct
upvoted 1 times
panal

I Agree
upvoted 2 times
ChXed
3 months ago
Correct: Second will be no as it is clearly mention that emails will not be send to Azure AD
security group. Thanks for pointing it out.
upvoted 2 times
panal

Answer is Y-N-Y - https://docs.microsoft.com/en-us/azure/azure-monitor/overview -
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/action-groups -
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/alerts-overview
upvoted 5 times
pprajapa

Did a test setup of alert and with the option of email/push/sms it will take any email address. I
entered my own hotmail address and it was fine. so Second should be Yes as long as the group
has email address.
upvoted 2 times
TexTheDog
5 days, 7 hours ago

The second answer is NO https://docs.microsoft.com/en-us/azure/azure-monitor/alerts/action-
groups "Email will not be sent to Azure AD groups or service principals."
upvoted 2 times
SilkyS19
2 weeks, 2 days ago

First - YES Azure Monitor helps you maximize the availability and performance of your
applications and services. It delivers a comprehensive solution for collecting, analyzing, and
acting on telemetry from your cloud and on-premises environments. This information helps you
understand how your applications are performing and proactively identify issues affecting them
and the resources they depend on.
upvoted 1 times
CARIOCA
1 month, 1 week ago

justification?
upvoted 2 times
Min_Thu

I think second answer is also YES . Azure monitor can send alert email if AAD Security Group is
configured as mail.
upvoted 1 times
werbinich

Confused about the 2nd option/question; what about a SG with underlying mailbox configured
?
upvoted 1 times
danny231

I agree, Email will not be sent to Azure AD groups or service principals. A notification email is
sent only to the primary email address
upvoted 2 times
Question #95Topic 1
Which Azure service provides a set of version control tools to manage code?
• A. Azure Repos
• B. Azure DevTest Labs
• C. Azure Storage
• D. Azure Cosmos DB
Correct Answer: A
Azure Repos is a set of version control tools that you can use to manage your code.
Incorrect Answers:
B: Azure DevTest Labs creates labs consisting of pre-configured bases or Azure
Resource Manager templates. These have all the necessary tools and software that you
can use to create environments.
D: Azure Cosmos DB is Microsoft's globally distributed, multi-model database service.
References:
https://docs.microsoft.com/en-us/azure/devops/repos/get-started/what-is-
repos?view=azure-devops
RohitRai89

I instantly thought of Devops, but to my surprise it isn't there. What is Azure Repos, never heard.
upvoted 11 times
JerryW

What is it like if you do not pay your invoice they come and repo your subscription lol
upvoted 5 times
Gerardo1971

Correct answer
upvoted 2 times
SilkyS19
2 weeks, 2 days ago

Correct Answer -A Azure Repos is a set of version control tools that you can use to manage your
code. Whether your software project is large or small, using version control as soon as possible
is a good idea.
upvoted 2 times
freshmaker

repos = repository
upvoted 1 times
panal

Correct Answer is A. Azure repo is a part of Azure DevOps
upvoted 3 times
Sultanista

It is correct. REF: first line of - https://docs.microsoft.com/en-us/azure/devops/repos/get-
started/what-is-repos?view=azure-devops
upvoted 1 times
Cloudyuga
11 months ago
azure repos correct
upvoted 4 times
Yani_Bear

https://docs.microsoft.com/en-us/azure/devops/repos/get-started/what-is-repos?view=azure-
devops
upvoted 3 times
sid_number0
1 year ago
Azure DevOps? Which isnt even there
upvoted 3 times
Shamos
1 year ago
"version control tools " means Azure Repo and its part of devOps
upvoted 3 times
Question #96Topic 1
HOTSPOT -
You need to manage Azure by using Azure Cloud Shell.
Which Azure portal icon should you select? To answer, select the appropriate icon in
the answer area.
Hot Area:
Correct
Answer:
You can access Azure Cloud Shell in the Azure portal by clicking the icon.
Azure Cloud Shell is an interactive, authenticated, browser-accessible shell for
managing Azure resources. It provides the flexibility of choosing the shell experience
that best suits the way you work, either Bash or PowerShell.
Cloud Shell enables access to a browser-based command-line experience built with
Azure management tasks in mind.
References:
https://docs.microsoft.com/en-us/azure/cloud-shell/overview?view=azure-cli-latest
Jurial

Select the button on top right side which is similar to ">-" signed.
upvoted 18 times
Rui05

Came in exam today
upvoted 9 times
t213

upvoted 1 times
Gerardo1971
2 weeks, 1 day ago

Correct answer
upvoted 2 times
panal
3 months ago
Click on Icon >_
upvoted 1 times
UnaDauSiPapaCanta

This question came up on 30.01.2021 at my exam. The Question is still valid and the answer is
the symbol ">_".
upvoted 6 times
Wayne366

The answer is like spot the difference..
upvoted 2 times
kjon16

>_ should be the right answer
upvoted 1 times
fabras
5 months ago
uhhh this was very hard to answer..... uff
upvoted 1 times
Cappu

This appeared in the exam today - 11/21
upvoted 1 times
MCSA11

https://docs.microsoft.com/pt-br/azure/cloud-shell/media/overview/overview-cloudshell-
icon.png
upvoted 1 times
Sikiru

thanks for this.
upvoted 1 times
reha

button on top right side which is similar to ">-" signed. correct
upvoted 1 times
GParreiras

New icon on the web console: https://docs.microsoft.com/pt-br/azure/cloud-
shell/media/overview/overview-cloudshell-icon.png
upvoted 7 times
imbz
1 year ago
Thanks for adding the picture
upvoted 2 times
rizam
1 year ago
Select the button " >_ "
upvoted 3 times
aussieanki
1 year ago
Click on Icon >_
upvoted 1 times
Question #97Topic 1
You have a virtual machine named VM1 that runs Windows Server 2016. VM1 is in the
East US Azure region.
Which Azure service should you use from the Azure portal to view service failure
notifications that can affect the availability of VM1?
• A. Azure Service Fabric

• B. Azure Monitor
• C. Azure virtual machines
• D. Azure Advisor
Correct Answer: C
In the Azure virtual machines page in the Azure portal, there is a named Maintenance
Status. This column will display service issues that could affect your virtual machine. A
service failure is rare but host server maintenance that could affect your virtual
machines is more common.
Azure periodically updates its platform to improve the reliability, performance, and
security of the host infrastructure for virtual machines. The purpose of these updates
ranges from patching software components in the hosting environment to upgrading
networking components or decommissioning hardware.
References:
https://docs.microsoft.com/en-us/azure/virtual-machines/maintenance-and-updates
Himanshumittal500

Azure Monitor maximizes the availability and performance of your applications by delivering a
comprehensive solution for collecting, analyzing, and acting on telemetry from your cloud and
on-premises environments. It helps you understand how your applications are performing and
proactively identifies issues affecting them and the resources they depend on.
upvoted 46 times
troublestarterx

This is in Azure Virtuel Machine : https://docs.microsoft.com/en-us/azure/virtual-
machines/maintenance-notifications-portal
upvoted 34 times
Rubaitur
Azure monitor is the correct option here
upvoted 1 times
DMAzureBoy
1 week ago
The three times I've ran through this I've picked B. Checking in my works Azure Subscription the
Monitor Service seems like the right place to get an overview of all your VM's that have been
setup for monitoring. However the question asks you about 1 VM. So it expects you to go
directly to that VM's page. Well, that's my rough explanation for it, I could be wrong!
upvoted 4 times
billdozer
2 weeks ago
B - Question asks.. "Which Azure Services..." VM is IaaS not an Azure Service.
upvoted 2 times
SilkyS19
2 weeks, 2 days ago

C - Azure Virtual Machine - is the correct answer. At the top of the VM details view, a new
notification ribbon will be added if your VM is included in a planned maintenance wave. In
addition, a new option is added to start maintenance when possible. Click on the maintenance
notification to see the maintenance page with more details on the planned maintenance. From
there, you will be able to start maintenance on your VM. Once you start maintenance, your
virtual machine will be maintained and the maintenance status will be updated to reflect the
result within few minutes.https://docs.microsoft.com/en-us/azure/virtual-
machines/maintenance-notifications-portal
upvoted 3 times
stainboy
2 weeks ago
you're talking about planned maintenance. The question is about service failure notifications
and that is on Azure Monitor
upvoted 1 times
SilkyS19
5 days, 8 hours ago
On second thought, I realized you are correct! As it's about service failure notification, the Azure
monitor makes more sense now.
upvoted 1 times
CARIOCA
1 month, 1 week ago

justification?
upvoted 2 times
Bernal8
3 weeks, 4 days ago

The answer is Azure Monitor, weeks ago i attended to a Msoft AZ900 course and i asked the
instructor this question.
upvoted 12 times
KnowledgeGain

Azure Monitor
upvoted 2 times
Min_Thu

Both B and C are correct. But Azure monitor can view the service failure for all VM but the
question is they want to check only specific VM1. So the fastest way is to check on Azure VM. I
will go with C. view service failure notifications that can affect the availability of VM1?
upvoted 8 times
jvpenna18
2 months ago
this is a degraded feature the new resource browser does not support this, here is the warning
from Azure if you switch to classic view: "Try the new virtual machine resource browser! This
experience is faster and has improved sorting and filtering capabilities. Please note that the new
experience will not show classic virtual machines and does not include support for some
columns such as maintenance status."
upvoted 3 times
drago86299

Is it B or C?
upvoted 1 times
badguytoo

This one should be Azure Monitor, u cannot find the VM service status on that page! trust me!
upvoted 3 times
jprmartinho

Azure Monitor is a non-region product (independent from region)
https://azure.microsoft.com/en-us/global-infrastructure/services/?products=monitor
upvoted 1 times
Bernal8

Mates, as i've said before, this answer is very easy. In "EAST" EEUU there isn't AZURE MONITOR
yet!! So the answer is correct: C!
upvoted 1 times
GBurns27

That was way back a while ago. Azure Monitor is now Non-Regional
upvoted 2 times
Bernal8
1 month ago
Correct, weeks ago I asket this question to a Msoft AZ900 instructor, and he told me that not
Azure Monitor is everywhere. Therefore, that is the right answer.
upvoted 1 times
VPoo
3 months ago
service failure notifications that can affect the availability of VM1 --> That's the catch.. it says it
will provide with notifications "that can affect" means it even refers to future service issues that
can be caused by any planned maintenances and hence the answer should be "C"
upvoted 2 times
panal
3 months ago
azure Monitor is correct
upvoted 1 times
Cis
1 week, 4 days ago

thanks for confirming
upvoted 1 times
Bernal8

The correst answer is in fact C, the key word is "EAST" EEUU, as it has no Azure Monitor there
yet. Here you can see the other regions in EEUU where the right answer for this same question
would be B (https://azure.microsoft.com/es-es/updates/azure-monitor-for-vms-is-now-
available-in-several-new-regions/)
upvoted 2 times
Question #98Topic 1
Solution: Run the script from a computer that runs Linux and has the Azure CLI tools
installed.
• A. Yes
• B. No
Correct Answer: B
PowerShell can now be installed on Linux. However, the question states that the
computer has Azure CLI tools, not PowerShell installed. Therefore, this solution does
not meet the goal.
References:
STH

After Microsoft Learn : "Azure PowerShell is a module that you can install for Windows
PowerShell, or PowerShell Core, which is a cross-platform version of PowerShell that runs on
Windows, Linux or macOS. Azure PowerShell enables you to connect to your Azure subscription
and manage resources." So the solution is definitivly valid
upvoted 71 times
beckie

powershell7 is available on all platforms so it should be Yes https://docs.microsoft.com/en-
us/powershell/scripting/install/installing-powershell-core-on-linux?view=powershell-7.1
upvoted 1 times
kbadger

It would be valid if it mentioned installing PS (Core) on Linux machine
upvoted 10 times
Oklingo
2 weeks, 2 days ago

I think you are RIGHT. It says "Azure CLI tools installed" BUT it doesn´t mention to have the
PowerShell core 6.x installed
upvoted 1 times
lehoang15tuoi

Your answer is not quite to the point, but yes, we can run Powershell script from the Azure CLI
az vm run-command invoke --command-id RunPowerShellScript https://docs.microsoft.com/en-
us/azure/virtual-machines/windows/run-command
upvoted 1 times
lehuspohus

This link mentioning "Run PowerShell scripts in your Windows VM", but the question is about
running scripts in Linux to create Azure resources, not about running it inside Azure VMs.
upvoted 2 times
lehoang15tuoi

You need to understand the command itself, not the link... The command starts with “az”,
meaning it is to be run from Azure CLI. Doesn’t matter what OS you install the Azure CLI on....
upvoted 2 times
Stan007

Answer is correct, Azure PowerShell requires Windows PowerShell to function. Azure CLI can't
execute any powershell scripts.
upvoted 68 times
konto2502
11 months ago
https://stackoverflow.com/questions/54928488/how-to-execute-powershell-script-using-
azurecli You can run scripts from Azure CLI
upvoted 3 times
Yheti

That post said.. use powershell to run azurecli
upvoted 1 times
TecKen313
3 weeks, 5 days ago

no it says use powershell before the powershell scripts when running IN AzureCLI
upvoted 1 times
Cachels

Answer should be: Yes https://docs.microsoft.com/en-us/azure/virtual-machines/windows/run-
command#azure-cli "Azure CLI The following example uses the az vm run-command command
to run a shell script on an Azure Windows VM."
upvoted 1 times
SilkyS19
2 weeks, 2 days ago

Correct Answer is YES! One can run Script in Linux machine either by using - Portal, Azure CLI or
REST API. One can run Script in Windows machine either by using - Portal, PowerShell or REST
API. The following example uses the az vm run-command command to run a shell script on an
Azure Linux VM. az vm run-command invoke -g myResourceGroup -n myVm --command-id
RunShellScript --scripts "apt-get update && apt-get install -y nginx"
https://docs.microsoft.com/en-us/azure/virtual-machines/linux/run-command
upvoted 2 times
SilkyS19
2 weeks, 2 days ago

The Correct answer is YES!! One can run script in linux machine either by using - Portal,Azure CLI
or REST API. One can run script in Windows machine either by using - Portal, PowerShell or REST
API The following example uses the az vm run-command command to run a shell script on an
Azure Linux VM. az vm run-command invoke -g myResourceGroup -n myVm --command-id
RunShellScript --scripts "apt-get update && apt-get install -y nginx"
https://docs.microsoft.com/en-us/azure/virtual-machines/linux/run-command
upvoted 1 times
ceasar3000
3 weeks, 6 days ago

B is correct powershell cmdlest syntax is different from CLI that execute commands in bash
upvoted 1 times
lemonpowah
1 month ago
You can run powershell scripts from Azure CLI
https://stackoverflow.com/questions/54928488/how-to-execute-powershell-script-using-
azurecli However the answer should still be NO. The question states that you only have installed
Azure CLI and not the powershell module as well. If you don't have powershell installed you
cannot run a powershell command/script from the azure cli.
upvoted 5 times
rishi_ram
1 month, 1 week ago

https://docs.microsoft.com/en-us/cli/azure/install-azure-cli-windows?tabs=azure-cli Download
and install the current release of the Azure CLI. After the installation is complete, you will need
to close and reopen any active Windows Command Prompt or PowerShell windows to use the
Azure CLI. You can now run the Azure CLI with the az command from either Windows Command
Prompt or PowerShell. PowerShell offers some tab completion features not available from
Windows Command Prompt. To sign in, run the az login command. Answer should be Yes
upvoted 1 times
dynamicJames

Guys, whats all the talk about? :) It is definitely YES, because it is possible to install Azure CLI on
Windows, macOS aaaand Linux: https://docs.microsoft.com/en-us/cli/azure/install-azure-cli-
linux Definitely YES
upvoted 1 times
NileshDump2021

Hi STH, The Azure powershell and powershell is different things. The word Powershell refers the
classic one that do not have cross platform support.
upvoted 1 times
Min_Thu

Can anyone give black and white answer ? Are are able to run power shell script in linux by using
azure cli ?
upvoted 1 times
EtianeMarcelino

No, because CLI normally is for a native terminal and Azure PowerShell is a module that needs
to be installed if you want use instead of CLI. look the @Yoyahe answer...
upvoted 1 times
panal
3 months ago
Answer "NO" is correct
upvoted 2 times
yoyahe
3 months ago
To run PS on Linux machine, PS core 6.x and higher version has to be installed in it. So, Run the
script from a computer that runs Linux and has the Azure CLI tools installed --> Wrong answer
Run the script from a computer that runs Linux and has the PowerShell core 6.x and higher
version installed --> Correct answer - From MS support forum
upvoted 4 times
type_12

thank you
upvoted 2 times
Urpiano

Again a question where the correct response is whatever MS wants. If we assume PowerShell
Core is installed: A; if we assume PowerShell Core is not installed: B; so... the best approach is
best to flip a coin and choose heads or tails
upvoted 1 times
nklemen
4 months ago
You can install Azure CLI on Linux. So that means that you can use it. The answer is outdated.
See here: https://docs.microsoft.com/en-us/cli/azure/install-azure-cli-linux
upvoted 3 times
pfu7538
4 months ago
Stll not clear : It seems you can run a Powershell script using Azure CLI : "The following example
uses the az vm run-command command to run a shell script on an Azure Windows VM" using
Azure CLI https://docs.microsoft.com/en-us/azure/virtual-machines/windows/run-command So
answer should be A...
upvoted 1 times
Divya07

A is correct in Linux you use CLI https://docs.microsoft.com/en-us/learn/modules/management-
fundamentals/6-use-azure-cli
upvoted 2 times
Question #99Topic 1
Solution: Run the script from a computer that runs Chrome OS and uses Azure Cloud
Shell.
• A. Yes
• B. No
Correct Answer: A
With the Azure Cloud Shell, you can run PowerShell cmdlets and scripts in a Web
browser. You log in to the Azure Portal and select the Azure Cloud Shell option.
This will open a PowerShell session in the Web browser. The Azure Cloud Shell has the
necessary Azure PowerShell module installed.
Note: to run a PowerShell script in the Azure Cloud Shell, you need to change to the
directory where the PowerShell script is stored.
References:
https://docs.microsoft.com/en-us/azure/cloud-shell/quickstart-powershell
vanr2000

This is totally valid. Run the script from a computer that runs Chrome OS and uses Azure Cloud
Shell to run Powershell scripts fo razure. Why doesn't meet the needs?
upvoted 59 times
Reddybo
5 months ago
The PS script should be already uploaded to the Azure Storage to be able to run it from the
Cloud Shell.. Is it already uploaded? We don't know that.. It's only says to run the script from the
computer, and not from the Azure portal..
upvoted 2 times
codeoptimus

The answer should YES. cos no matter the OS specification as long as you have a browser
application installed. The azure portal(Cloudshell) gives you the liberty of running commands in
Bash or Powershell environment. It also have all the modules need installed.
upvoted 8 times
Nebula09

You are correct given answer is incorrect. Answer is YES.
upvoted 5 times
joondez

Many people think this is a trick question because you cannot install CLI onto Chrome OS.
However, I think this question is way more straightforward. You can use Cloud Shell in the
Chrome browser. This works on all OS. This question is being used to demonstrate that the
Cloud Shell can run on all OS.
upvoted 25 times
MartinMystere

I have read all the comments and I believe everybody missed the point. The question states
Chrome OS and not Chrome Web Browser. https://www.google.com/chromebook/chrome-os/
upvoted 20 times
shalobis
1 year ago
I think it is easy to get carried away. The fact that Chrome is NOT an OS (Operating System), in
itself makes the statement Wrong. So for me the ans to this is B.
upvoted 3 times
Rainman

Chrome OS is a linux based OS different than chrome browser
upvoted 3 times
RockMAN

Chrome OS is a Gentoo Linux–based operating system designed by Google. It is derived from
the free software Chromium OS and uses the Google Chrome web browser as its principal user
interface
upvoted 2 times
lejozapata

But is a complicated question, because they mentioned Azure Cloud Shell and Azure CS is
accessed from a Browser
upvoted 7 times
purav1009

Yep. There's no mention of any web browser.
upvoted 4 times
Gerardo1971

Correct answer
upvoted 1 times
caklov

The answer has changed to Yes now?? Was it a No before??
upvoted 1 times
panal
3 months ago
Answer is YES
upvoted 1 times
oskar

Just think about it, if you were the admin, did you recommend a Chrome OS for PowerShell
scripting? I think you would recommend a Windows, Linux or Mac.
upvoted 2 times
Sand2503

You need PowerShell Core to run PowerShell scripts. So The answer is No.
upvoted 1 times
murat12345

It doesnt say that Azure Powershell or Azure Cli is used. Neither does it say that the Azure Cloud
shell is used. We only know that a scipt (be it azure cli or azure powershell) is run on a Linux OS,
so we cannot know the answer.
upvoted 1 times
murat12345

"Run the script from a computer that runs Chrome OS and uses Azure Cloud Shell". It doesn't
say that you use Azure Cloud Shell to run the Azure Powershell script. It says to run the azure
powershell script on a Linux OS, that is not possible. Unless you use Azure Powershell Core. So
answer seems no. But it depends on how you see the question.
upvoted 1 times
nigeldmgriffith

A ==> Cloud Shell supports the latest version of Chrome. https://docs.microsoft.com/en-
us/azure/cloud-shell/limitations
upvoted 1 times
Basant11

The Answer should be "Yes". No idea, why the answer is wrong. I saw another question instead
of powershell it was bash. I logged in portal.azure.com and clicked azure cloud shell and able to
perform the same from bash as well as powershell. I think Microsoft/Owner just want if the
question given for powershell, bash but solution is related to opposite (I mean in this question
as powershell and bash both are command based but the solution was givigin as UI based) so it
is wrong. instead of UI, if it was written unix/linux the answer is "YES"
upvoted 3 times
Urpiano

Yes. Any web browser can run Azure Cloud Shell
upvoted 1 times
Kirtesh

I think, Answer should be yes. A PowerShell script is a file that contains PowerShell cmdlets and
code. A PowerShell script needs to be run in PowerShell. With the Azure Cloud Shell, you can
run PowerShell cmdlets and scripts in a Web browser. You log in to the Azure Portal and select
the Azure Cloud Shell option. This will open a PowerShell session in the Web browser. The Azure
Cloud Shell has the necessary Azure PowerShell module installed. Note: to run a PowerShell
script in the Azure Cloud Shell, you need to change to the directory where the PowerShell script
is stored. References: https://docs.microsoft.com/en-us/azure/cloud-shell/quickstart-powershell
upvoted 2 times
cmatcha

Correct Answer: A Explanation: A PowerShell script is a file that contains PowerShell cmdlets and
code. A PowerShell script needs to be run in PowerShell. With the Azure Cloud Shell, you can
run PowerShell cmdlets and scripts in a Web browser. You log in to the Azure Portal and select
the Azure Cloud Shell option. This will open a PowerShell session in the Web browser. The Azure
Cloud Shell has the necessary Azure PowerShell module installed. Note: to run a PowerShell
script in the Azure Cloud Shell, you need to change to the directory where the PowerShell script
is stored. References: https://docs.microsoft.com/en-us/azure/cloud-shell/quickstart-powershell
upvoted 3 times
hachascloud

Wrong one, You can connect to the portal with a chromebook and Azure Cloud shell provides
Azure CLI and Azure Powershell so the script can DEFINITELY be executed
upvoted 1 times
G_7
5 months ago
Don't you need Powershell 7.0 on all other platforms except for Windows?
upvoted 1 times
Reddybo
5 months ago
Also, the question is saying the you run the script from the machine, not from the Azure storage,
so be careful. So B should be correct
upvoted 1 times
mikl

Solution: Run the script from a computer that runs Chrome OS and uses Azure Cloud Shell. But -
if you run it from Azure Cloud Shell - you run it inside a browser. I dont know much about
Chrome OS - but cant it just open the script - and then you c/p the lines into Cloud Shell -
shouldnt that work just fine?
upvoted 1 times
Question #100Topic 1
HOTSPOT -
select No.
Hot Area:
Correct
Answer:
Box 1: Yes -
Azure Service Health consists of three components: Azure Status, Azure Service Heath
and Azure Resource Health.
Azure service health provides a personalized view of the health of the Azure services
and regions you're using. This is the best place to look for service impacting
communications about outages, planned maintenance activities, and other health
advisories because the authenticated Azure Service Health experience knows which
services and resources you currently use.
To view the health of all other services available in Azure, you would use the Azure
Status component of Azure Service Health. Azure status informs you of service outages
in Azure on the Azure Status page. The page is a global view of the health of all Azure
services across all Azure regions.
Box 2: Yes -
The best way to use Service Health is to set up Service Health alerts to notify you via
your preferred communication channels when service issues, planned maintenance, or
other changes may affect the Azure services and regions you use.
Box 3: No -
You can use Resource Health to view the health of a virtual machine. However, you
cannot use Resource Health to prevent a service failure affecting the virtual machine.
Azure resource health provides information about the health of your individual cloud
resources such as a specific virtual machine instance.
References:
https://docs.microsoft.com/en-us/azure/service-health/overview
panal

upvoted 8 times
SilkyS19

First one is tricky - The word Azure makes the big difference here. Ideally Azure status informs
you of service outages in Azure on the Azure Status page. The page is a global view of the
health of all Azure services across all Azure regions. As, the Azure Status is part of the Azure
Service Health this can answer is YES. However, if question mentioned just 'Service Health' then
it would be wrong as Service Health the provides a personalized view of the health of the Azure
services and regions you're using. Azure Service Health => Azure Status + Service Health +
Resource health
upvoted 2 times
AnxiousKid

YES YES NO
upvoted 3 times
Solution: Run the script from a computer that runs macOS and has PowerShell Core 6.0
installed.
• A. Yes
• B. No
Correct Answer: A
In this question, the computer has PowerShell Core 6.0 installed. Therefore, this
solution does meet the goal.
Note: To create Azure resources using PowerShell, you would need to import the Azure
PowerShell module which includes the PowerShell cmdlets required to create the
resources.
References:
TheSwedishGuy

I can't believe there has been 101 replies to this comment section and not one clear answer. So
let me provide it easily for you guys: The computer has PowerShell Core 6.0, but it doesn't have
the Azure CLI installed. There is no mention of that in the question. You need Azure PowerShell
module in addition to PowerShell to run Azure commands, such as New-AzVM. Therefore, the
answer should be B, No.
upvoted 17 times
triasamo
1 month ago
Long Live Sweden!
upvoted 2 times
Nujjy

These questions are poorly worded. You should still need to install the Az module inside
powershell core for this to run.
upvoted 13 times
SilkyS19

The Correct Answer is YES PowerShell Core 6.0 is a new edition of PowerShell that is cross-
platform (Windows, macOS, and Linux), open-source, and built for heterogeneous environments
and the hybrid cloud. https://docs.microsoft.com/en-us/powershell/scripting/whats-new/what-
s-new-in-powershell-core-60?view=powershell-7.1
upvoted 2 times
Techno_Head

Answer is incorrect Azure PowerShell works with PowerShell 6.2.4 and later on all platforms. It is
also supported with PowerShell 5.1 on Windows. So you need to update first.
https://docs.microsoft.com/en-us/powershell/azure/install-az-ps?view=azps-
5.6.0#:~:text=x%20and%20later%20is%20the,with%20PowerShell%205.1%20on%20Windows.
upvoted 2 times
Techno_Head

Incorrect but because it is not the required version. Azure PowerShell works with PowerShell
6.2.4 and later on all platforms. It is also supported with PowerShell 5.1 on
Windows.https://docs.microsoft.com/en-us/powershell/azure/install-az-ps?view=azps-
5.6.0#:~:text=x%20and%20later%20is%20the,with%20PowerShell%205.1%20on%20Windows.
upvoted 3 times
anonymous2021

answer is correct
upvoted 1 times
Min_Thu

The answer is NO. you can install PowerShell Core 6.0 in MacOS. but cannot create azure
resource without az module installed (such as azure cli)
upvoted 3 times
Jeroenlicht

To create the resource, the powershell AZ module has to be installed. I say itis not. Change my
mind :)
upvoted 2 times
mosx

The correct answer is Yes! The goal here is very simple, just to run the Powershell script. So the
recommendation is possible.
upvoted 1 times
rob_724

Hate this trick question. While powershell core can work on Mac -- they didn't say it has the AZ
modules installed. Hence my orig. answer was no.
upvoted 2 times
panal

Correct
upvoted 2 times
Acredser

From https://docs.microsoft.com/en-us/powershell/azure it states: "Azure PowerShell works with
PowerShell 5.1 on Windows, and PowerShell 7.x and higher on all platforms." Does not that
indicate that the solution will NOT work?
upvoted 2 times
nigeldmgriffith

A ==> Use cmd-shift-v on macOS
upvoted 1 times
inf
4 months ago
Yes. Question may be outdated here, but the premise is correct. You may run PowerShell on
Mac OS and install Azure modules then create Azure resources. e.g.
http://techgenix.com/powershell-in-macos/
upvoted 4 times
rasomon

It is necessary to have PowerShell Core on macOS and Linux plus Azure PowerShell module -
this extra module must be installed to add the Azure-specific commands to PowerShell. Ref:
https://docs.microsoft.com/en-us/learn/modules/automate-azure-tasks-with-powershell/3-
install-azure-powershell
upvoted 3 times
G_7
5 months ago
I'm going to stop using this test. There seems to be a lot of wrong answers here and outdated
materiel. Does anyone from Examtopics even replay to these discussions?
upvoted 2 times
mikl

That why its Gold that we got these discussion going on - these can clarify. I will admit there are
alot of wrong answers - but this is clearly a "YES". You can run Powershell Core on MacOS.
https://docs.microsoft.com/en-us/powershell/scripting/install/installing-powershell-core-on-
macos?view=powershell-7.1
upvoted 1 times
JBPI
1 month, 1 week ago

Yes, it will run the PowerShell core but the scenario is "An Azure administrator plans to run a
PowerShell script that creates Azure resources." - Do you meet the goal? Of course "No"
because it doesn't have the Az Module installed.
upvoted 1 times
Srivathsan
5 months ago
I too have the same feeling. We need to be a bit cautious with the answers.
upvoted 1 times
SSHaque

so, what's the final verdict on this yes or no?
upvoted 1 times
HOTSPOT -
You need to view a list of planned maintenance events that can affect the availability of
an Azure subscription.
Which blade should you use from the Azure portal? To answer, select the appropriate
blade in the answer area.
Hot Area:
Correct Answer:
On the Help and Support blade, there is a Service Health option. If you click Service
Health, a new blade opens. The Service Health blade contains the Planned
Maintenance link which opens a blade where you can view a list of planned
maintenance events that can affect the availability of an Azure subscription.
Su_L

the image is cut-off at bottom, at the end on this Menu list you will see 'Help + Support' listed
as a Menu option that's the correct answer
upvoted 76 times
koian

Home > Help + support > Service Health > Planned maintenance
upvoted 22 times
devpatel

Help + Support is not visible in the image.
upvoted 2 times
Gerardo1971
2 weeks, 1 day ago

Help + support
upvoted 1 times
SilkyS19
2 weeks, 2 days ago

Help + Support (Probably the last option ) > Service Health Service Health provides personalized
health/status of the Azure instance/Subscription you are using.
upvoted 1 times
DeepMoon
2 weeks, 4 days ago

Well if you are given only this picture you can still get there. By clicking the Dashboard -then
clicking on Service Health.
upvoted 1 times
cmccron
1 month ago
Why are there so many cut off answers on examtopics.com?
upvoted 2 times
MentalG
1 month ago
Help + Support https://www.freecram.com/uploads/AZ-
900/a2d49c88a2558ec8e6741a9afcf1d991.jpg
upvoted 3 times
CARIOCA
1 month, 1 week ago

How do I send the correct image of the question? NOTE: I tried to copy, paste and others, but I
couldn't do it.
upvoted 1 times
VVR141
1 month, 1 week ago

The same "Service Health" tab can be access from within "Monitor" service as well. since the
question leaned towards the blade, its Help + Support option
upvoted 1 times
rob_724

Help + Support not found
upvoted 2 times
heman85

Image is wrong, Help + Support is not presented on this image. The answer is write (Help +
Support) but the image is wrong.
upvoted 5 times
Full21
3 months ago
I think there is an issue with the image for this question
upvoted 8 times
Dream101
3 months ago
We have the "Service Health" option under Monitor also which opens up the same link. So either
one should be correct answer?
upvoted 2 times
ChrisGH

que es esta pecha
upvoted 3 times
DRAG DROP -
Match the Azure service to the correct definition.
all.
Select and Place:
Correct
Answer:
Box 1: Azure DevOps.
Azure DevOps is Microsoft‫ג‬€™s primary software development and deployment
platform.
DevOps influences the application lifecycle throughout its plan, develop, deliver and
operate phases.
Box 2: Azure Advisor.
Advisor is a personalized cloud consultant that helps you follow best practices to
optimize your Azure deployments. It analyzes your resource configuration and usage
telemetry and then recommends solutions that can help you improve the cost
effectiveness, performance, high availability, and security of your Azure resources.
Box 3: Azure Cognitive Services.
Azure Cognitive Services are APIs, SDKs, and services available to help developers
build intelligent applications without having direct AI or data science skills or knowledge.
Azure Cognitive Services enable developers to easily add cognitive features into their
applications. The goal of Azure Cognitive Services is to help developers create
applications that can see, hear, speak, understand, and even begin to reason. The
catalog of services within Azure Cognitive Services can be categorized into five main
pillars - Vision, Speech, Language, Web Search, and Decision.
Box 4. Azure Application Insights.
Azure Application Insights detects and diagnoses anomalies in web apps.
Application Insights, a feature of Azure Monitor, is an extensible Application
Performance Management (APM) service for developers and DevOps professionals.
Use it to monitor your live applications. It will automatically detect performance
anomalies, and includes powerful analytics tools to help you diagnose issues and to
understand what users actually do with your app.
References:
https://docs.microsoft.com/en-us/azure/azure-monitor/app/app-insights-overview
https://azure.microsoft.com/en-gb/overview/what-is-devops/
https://docs.microsoft.com/en-us/azure/advisor/advisor-overview
https://docs.microsoft.com/en-us/azure/cognitive-services/welcome
Nekerobert

My short code...works for me, but don't know about you. DevOps = code deploy Advisor =
guidance Cognitive = Intelligence Insight = Monitor So...the matching is correct!
upvoted 14 times
panal
Most Recent 3 months ago

Correct
upvoted 3 times
DRAG DROP -
all.
Select and Place:
Correct
Answer:
Box 1: Azure SQL Database -

SQL Server is a relational database service. Azure SQL Database is a managed SQL
Server Database in Azure. The SQL Server is managed by Microsoft; you just have
access to the database.
Box 2: Azure SQL Synapse Analytics
Azure SQL Synapse Analytics (previously called Data Warehouse) is a cloud-based
Platform-as-a-Service (PaaS) offering from Microsoft. It is a large-scale, distributed,
MPP (massively parallel processing) relational database technology in the same class
of competitors as Amazon Redshift or Snowflake. Azure SQL
Synapse Analytics is an important component of the Modern Data Warehouse multi-
platform architecture. Because Azure SQL Synapse Analytics is an MPP system with a
shared-nothing architecture across distributions, it is meant for large-scale analytical
workloads which can take advantage of parallelism.
Box 3: Azure Data Lake Analytics
You can process big data jobs in seconds with Azure Data Lake Analytics. You can
process petabytes of data for diverse workload categories such as querying,
ETL, analytics, machine learning, machine translation, image processing and sentiment
analysis by leveraging existing libraries written in .NET languages, R or
Python.
Box 4: Azure HDInsight.
Apache Hadoop was the original open-source framework for distributed processing and
analysis of big data sets on clusters. The Hadoop ecosystem includes related software
and utilities, including Apache Hive, Apache HBase, Spark, Kafka, and many others.
Azure HDInsight is a fully managed, full-spectrum, open-source analytics service in the
cloud for enterprises. The Apache Hadoop cluster type in Azure HDInsight allows you to
use HDFS, YARN resource management, and a simple MapReduce programming
model to process and analyze batch data in parallel.
Reference:
https://azure.microsoft.com/en-us/services/sql-database/
https://docs.microsoft.com/en-us/azure/sql-data-warehouse/sql-data-warehouse-
overview-what-is https://docs.microsoft.com/bs-latn-ba/azure/hdinsight/hadoop/apache-
hadoop-introduction https://www.blue-granite.com/blog/is-azure-sql-data-warehouse-a-
good-fit-updated https://azure.microsoft.com/en-gb/services/data-lake-analytics/
panal

Correct Answer
upvoted 5 times
Alexandersss

correct :)
upvoted 2 times
nicky_nyasha
4 weeks, 1 day ago
Correct
upvoted 1 times
Austin123
1 month, 1 week ago

Correct
upvoted 1 times
HOTSPOT -
You need to identify which blades in the Azure portal must be used to perform the
following tasks:
✑ View security recommendations.
✑ Monitor the health of Azure services.
✑ Browse available virtual machine images.
Which blade should you identify for each task? To answer, select the appropriate
options in the answer area.
Hot Area:
Correct
Answer:
Box 1:
Azure Monitor is used to monitor the health of Azure services.
Azure Monitor maximizes the availability and performance of your applications and
services by delivering a comprehensive solution for collecting, analyzing, and acting on
telemetry from your cloud and on-premises environments. It helps you understand how
your applications are performing and proactively identifies issues affecting them and the
resources they depend on.
Box 2:
You can browse available virtual machine images in the Azure Marketplace.
Azure Marketplace provides access and information on solutions and services available
from Microsoft and their partners. Customers can discover, try, or buy cloud software
solutions built on or for Azure. The catalog of 8,000+ listings provides Azure building
blocks, such as Virtual Machines (VMs), APIs, Azure apps,
Solution Templates and managed applications, SaaS apps, containers, and consulting
services.
Box 3.
Azure Advisor displays security recommendations.
Azure Advisor provides you with a consistent, consolidated view of recommendations
for all your Azure resources. It integrates with Azure Security Center to bring you
security recommendations. You can get security recommendations from the Security
tab on the Advisor dashboard.
Security Center helps you prevent, detect, and respond to threats with increased
visibility into and control over the security of your Azure resources. It periodically
analyzes the security state of your Azure resources. When Security Center identifies
potential security vulnerabilities, it creates recommendations. The recommendations
guide you through the process of configuring the controls you need.
References:
https://docs.microsoft.com/en-us/azure/azure-monitor/overview
https://docs.microsoft.com/en-us/azure/marketplace/marketplace-faq-publisher-guide
https://docs.microsoft.com/en-us/azure/advisor/advisor-security-recommendations
nenar

answer is correct, set your mind to this: health = monitor, images = marketplace,
recommendations = advisor
upvoted 57 times
numan

I saw other question said that azure advisor not recommend security adivses.ı don't understand
c
upvoted 10 times
success101

"Advisor provides recommendations for Application Gateway, App Services, availability sets,
Azure Cache, Azure Data Factory, Azure Database for MySQL, Azure Database for PostgreSQL,
Azure Database for MariaDB, Azure ExpressRoute, Azure Cosmos DB, Azure public IP addresses,
SQL Data Warehouse, SQL servers, storage accounts, Traffic Manager profiles, and virtual
machines." Note: It does not support AD like it was asked in the other question. Source:
upvoted 13 times
Urpiano
I think you are referring to a question were an incorrect response was Azure AD; Azure Advisor
doesn't do security recommendations for AAD security and the question was about security
recommendations
upvoted 2 times
Jagatvk
4 months ago
You are right
upvoted 1 times
panal

Answer is correct.
upvoted 1 times
mikl

Monitor Marketplace Advisor
upvoted 1 times
BECP
4 months ago
Advisor is a personalized cloud consultant that helps you follow best practices to optimize your
Azure deployments. It analyzes your resource configuration and usage telemetry and then
recommends solutions that can help you improve the cost effectiveness, performance, Reliability
(formerly called High availability), and SECURITY of your Azure resources.
upvoted 2 times
sunwukong

correct
upvoted 1 times
dbobspurfpoo

Got this exact question on my exam - September 2020
upvoted 5 times
dradhzn

it's correct
upvoted 1 times
Satishraju

The best way to understand is the word "browse" which means to search on the web. In this
case, Azure is the portal to search, it could be VM images or anything, u browse for a product in
the markerplace as per the options in the answers. The rest are health should be monitored, so a
mintoring tool can help, in this case Azure Monitor is the answer. Who recommends, an advisor
right. So Azire Advisor is correct
upvoted 7 times
Cloudyuga
11 months ago
given answers are correct
upvoted 2 times
gaku1016
1 year, 1 month ago

Answer is correct.
upvoted 7 times
Solution: You use Bash in Azure Cloud Shell.
• A. Yes
• B. No
Correct Answer: A
With Azure Cloud Shell, you can create virtual machines using Bash or PowerShell.
Azure Cloud Shell is an interactive, authenticated, browser-accessible shell for
managing Azure resources. It provides the flexibility of choosing the shell experience
that best suits the way you work, either Bash or PowerShell.
Reference:
https://docs.microsoft.com/en-us/azure/cloud-shell/quickstart
https://docs.microsoft.com/en-us/azure/cloud-shell/overview
KnowledgeGain

Yes, we can use bash/powershell
upvoted 3 times
ttn

Agree, panal. However it had been more clear if it was mentioned that a browser on the Android
tablet can be used to connect to Azure portal where Azure cloud shell can be accessed.
upvoted 2 times
panal
3 months ago
Answer is correct.
upvoted 2 times
You have an on-premises application that sends email notifications automatically based
on a rule.
You plan to migrate the application to Azure.
You need to recommend a serverless computing solution for the application.
• A. a web app
• B. a server image in Azure Marketplace
• C. a logic app
• D. an API app
Correct Answer: C
Azure Logic Apps is a cloud service that helps you schedule, automate, and orchestrate
tasks, business processes, and workflows when you need to integrate apps, data,
systems, and services across enterprises or organizations. Logic Apps simplifies how
you design and build scalable solutions for app integration, data integration, system
integration, enterprise application integration (EAI), and business-to-business (B2B)
communication, whether in the cloud, on premises, or both.
For example, here are just a few workloads you can automate with logic apps:
✑ Process and route orders across on-premises systems and cloud services.
✑ Send email notifications with Office 365 when events happen in various systems,
apps, and services.
✑ Move uploaded files from an SFTP or FTP server to Azure Storage.
✑ Monitor tweets for a specific subject, analyze the sentiment, and create alerts or
tasks for items that need review.
References:
https://docs.microsoft.com/en-us/azure/logic-apps/logic-apps-overview

haha logic app is the only one I didn't know anything about, but seeing the 3 options I knew
none of them are suitable for this. So I ended guessing this right :) B - it's a server, you need a
serverless solution D - API, no! you need to migrate the whole app A - web app, no, NO because
web requires a server. The web is nothing but a huge WAN composed of many, many LANs. C -
Whereas logic apps at least tells no conflicting information and implies you can migrate the
whole app to it. Also the word "logic" refers to the email app sending emails "based on one
rule". So I imagine it is done automatically, or 'logically'. Hence they are requiring a ServerLESS
solution!
upvoted 86 times
shubh120

superb logic, totally agreed
upvoted 1 times
Piiri565
very good explanation
upvoted 3 times
redfrog1668

Your logic is good.
upvoted 2 times
NIk2020

Answer : C Explanation: Azure Logic Apps is a cloud service that helps you schedule, automate,
and orchestrate tasks, business processes, and workflows when you need to integrate apps,
data, systems, and services across enterprises or organizations. Logic Apps simplifies how you
design and build scalable solutions for app integration, data integration, system integration,
enterprise application integration (EAI), and business-to-business (B2B) communication, whether
in the cloud, on premises, or both. For example, here are just a few workloads you can automate
with logic apps: -> Process and route orders across on-premises systems and cloud services. ->
Send email notifications with Office 365 when events happen in various systems, apps, and
services. -> Move uploaded files from an SFTP or FTP server to Azure Storage. -> Monitor
tweets for a specific subject, analyze the sentiment, and create alerts or tasks for items that need
review. References: https://docs.microsoft.com/en-us/azure/logic-apps/logic-apps-overview
upvoted 15 times
Gerardo1971

Correct answer
upvoted 1 times
Limitless69
3 weeks ago
Azure Functions should have been a better option if included. Sending an email isn't that much
a business orchestration. However, in this question, logic app is the best choice
upvoted 1 times
Deeptheboss
3 weeks, 5 days ago
Serverles=Logic Apps!
upvoted 1 times
KnowledgeGain

C: Using Logic apps we can create workflows that could send emails
upvoted 1 times
panal
3 months ago
C is Correct Answer.
upvoted 1 times
alfteezy91

C is correct for serverless computing solutions.
upvoted 1 times
Cabong
5 months ago
Logic app is correct because you can setup events to send emails using 0365
upvoted 1 times
sidharthwader

Logic apps and azure functions are serverless services
upvoted 1 times
MCSA11

C. a logic app
upvoted 1 times
Sst121

Logic apps can create scheduled or workflows to trigger an email. to me, C is a right answer.
upvoted 1 times
Shubham9978
11 months ago
hahaha
upvoted 1 times
KuAshman
1 year ago
Extra info: you don't have to deal with coding when using logic app. But if you must write some
code, you can create code snippets with Azure Functions and run that code on-demand from
logic apps.
upvoted 8 times
redfrog1668

Good to know. Thanks.
upvoted 1 times
vsivas

logic app does not send emails right? it does some functionality based on event triggers. partial
correct. also out of other options this is only best answer. is that server less?
upvoted 4 times
gelato

You're correct, it does not send an email. You can use the logic app to process the creation of
email or create callbacks. To use it to send an email you should integrate the email provider API.
upvoted 1 times
sbettani

Logic app can send email https://docs.microsoft.com/en-us/azure/logic-apps/tutorial-process-
email-attachments-workflow
upvoted 24 times
You plan to deploy a website to Azure. The website will be accessed by users
worldwide and will host large video files.
You need to recommend which Azure feature must be used to provide the best video
playback experience.
• A. an application gateway
• B. an Azure ExpressRoute circuit
• C. a content delivery network (CDN)
• D. an Azure Traffic Manager profile
Correct Answer: C
The question states that users are located worldwide and will be downloading large
video files. The video playback experience would be improved if they can download the
video from servers in the same region as the users. We can achieve this by using a
content deliver network.
A content delivery network (CDN) is a distributed network of servers that can efficiently
deliver web content to users. CDNs store cached content on edge servers in point-of-
presence (POP) locations that are close to end users, to minimize latency.
Azure Content Delivery Network (CDN) offers developers a global solution for rapidly
delivering high-bandwidth content to users by caching their content at strategically
placed physical nodes across the world. Azure CDN can also accelerate dynamic
content, which cannot be cached, by leveraging various network optimizations using
CDN POPs. For example, route optimization to bypass Border Gateway Protocol (BGP).
The benefits of using Azure CDN to deliver web site assets include:
✑ Better performance and improved user experience for end users, especially when
using applications in which multiple round-trips are required to load content.
✑ Large scaling to better handle instantaneous high loads, such as the start of a
product launch event.
✑ Distribution of user requests and serving of content directly from edge servers so that
less traffic is sent to the origin server.
References:
https://docs.microsoft.com/en-us/azure/cdn/cdn-overview
Himanshumittal500
A Content delivery Network is a distributed network of server that can efficiently deliver a web
content to user.
upvoted 29 times
Gat

https://docs.microsoft.com/en-us/azure/cdn/
upvoted 9 times
Gerardo1971

Correct answer
upvoted 1 times
SilkyS19
2 weeks, 2 days ago

CDN is the correct answer.
upvoted 2 times
rob_724

yea CDN just like Cloudfront... w8 this isn't AWS haha
upvoted 1 times
panal
3 months ago
C is Correct Answer.
upvoted 1 times
nigeldmgriffith

C ==> https://docs.microsoft.com/en-us/azure/cdn/
upvoted 1 times
nigeldmgriffith
4 months ago
C; https://docs.microsoft.com/en-us/azure/cdn/cdn-overview
upvoted 2 times
DeepDhungel

Isn't the answer Cloud Front?
upvoted 2 times
Noice
4 months ago
Negative, that is for AWS
upvoted 1 times
BigR

Cloud Front is AWS
upvoted 2 times
manosd
6 months ago
antoni agapi mou ela pare me apo dw
upvoted 1 times
pouki

poustis eisai?)))
upvoted 1 times
Jesi

Content delivery Network
upvoted 2 times
mp7

Doesn't cdn only store static data like html and images?
upvoted 2 times
AniketG

video is also a static file
upvoted 1 times
efla

should be CloudFront LOL!
upvoted 8 times
Noice
4 months ago
Haha! Nice one..
upvoted 1 times
demigodnyi

lol same :D
upvoted 1 times
fabras

me too hahha
upvoted 1 times
Vam123

Hahaha , Was thinking the same :p
upvoted 1 times
GabrielD

"Best playback video experience" for global users can be achieved only with Content (cached)
Delivery Network. Application Gateway is used to optimize the traffic based on the type
upvoted 8 times
Your company plans to deploy several million sensors that will upload data to Azure.
You need to identify which Azure resources must be created to support the planned
solution.
Which two Azure resources should you identify? Each correct answer presents part of
the solution.
• A. Azure Data Lake

• B. Azure Queue storage
• C. Azure File Storage
• D. Azure IoT Hub
• E. Azure Notification Hubs
Correct Answer: AD
IoT Hub (Internet of things Hub) provides data from millions of sensors.
IoT Hub is a managed service, hosted in the cloud, that acts as a central message hub
for bi-directional communication between your IoT application and the devices it
manages. You can use Azure IoT Hub to build IoT solutions with reliable and secure
communications between millions of IoT devices and a cloud- hosted solution backend.
You can connect virtually any device to IoT Hub.
There are two storage services IoT Hub can route messages to -- Azure Blob Storage
and Azure Data Lake Storage Gen2 (ADLS Gen2) accounts. Azure Data
Lake Storage accounts are hierarchical namespace-enabled storage accounts built on
top of blob storage. Both of these use blobs for their storage.
References:
https://docs.microsoft.com/en-us/azure/iot-hub/iot-hub-devguide-messages-d2c
Moon

I would go with "A & D". Data Lake: is typical storage for IoT Hub as in the below link
https://docs.microsoft.com/en-us/azure/iot-hub/iot-hub-devguide-messages-d2c
upvoted 112 times
MjMumbai

Datalake is used to process large amount of data and perform analytics on top of that. It is not
used by transaction purpose. Once you get IoT data in queue, you can push it to datalake for
further analysis purpose. so queue is right answer.
upvoted 9 times
lollo1234

Correct. We know that IOT hub is one of the correct answer. The answer is Data Lake, specifically
from the link above.. IOT hub can store data at two places, and hence data lakes appears to be
the correct second choice, depending on the volume of the data. Azure Storage as a routing
endpoint There are two storage services IoT Hub can route messages to -- Azure Blob Storage
and Azure Data Lake Storage Gen2 (ADLS Gen2) accounts.
upvoted 3 times
Cherry2020

Thats true. A & D are correct. According to Microsoft, Azure Data Lake store is a hyper-scale
repository for big data analytics workloads and a Hadoop Distributed File System (HDFS) for the
cloud. It… Imposes no fixed limits on file siz
upvoted 1 times
zarl
1 year ago
There are two storage services IoT Hub can route messages to: Azure Blob Storage and Azure
Data Lake Storage Gen2 (ADLS Gen2) accounts. Azure Data Lake Storage accounts are
hierarchical namespace-enabled storage accounts built on top of blob storage. Both of these
use blobs for their storage.
upvoted 5 times
Ayoubbts
B and D are correct. In the statement we can read : « deploy several million sensors that will
upload data to Azure ». Here the keyword is deploy. To deploy IoT solutions you have to use
Azure IoT Hub. The Data Lake is for analytics not deployment. You will obviously use the Queue
Storage to handle the amount of exchanges.
upvoted 57 times
Gerardo1971

Correct answer
upvoted 1 times
CARIOCA
1 month, 1 week ago

justified it?
upvoted 1 times
KnowledgeGain

A & D is the corrrect answer
upvoted 1 times
hercu

Correct Answers are: A & D. “Azure queue storage is only meant as a transactional measure. You
add items to a queue, and when they are processed they are taken off the queue again. In this
case, Data Lake is the right storage method.” References: https://acloud.guru/forums/az-900-
microsoft-azure-fundamentals/discussion/-M9d6V35MCr6-mBy-Seh/ “There are two storage
services IoT Hub can route messages to -- Azure Blob Storage and Azure Data Lake Storage
Gen2 (ADLS Gen2) accounts. Azure Data Lake Storage accounts are hierarchical namespace-
enabled storage accounts built on top of blob storage. Both of these use blobs for their
storage.” References: https://docs.microsoft.com/en-us/azure/iot-hub/iot-hub-devguide-
messages-d2c
upvoted 1 times
panal
3 months ago
Correct choices A & D
upvoted 2 times
Beros

zure Queue Storage is a service for storing large numbers of messages. A queue may contain
millions of messages, up to the total capacity limit of a storage account. That is the logically best
answer. https://docs.microsoft.com/en-us/azure/storage/queues/storage-queues-introduction
upvoted 1 times
exadata360

A & D...
upvoted 2 times
opop1234

A and D is right answer. AGREED
upvoted 1 times
poojakittur

I think its A & D as Azure IOT hub either connects to Azure Data Lake which uses Blob storage
internally or it uses Blob Storage.
upvoted 1 times
kjon16

A&D are correct
upvoted 1 times
sidharthwader

Its Azure data lake and IoT Hub cause only 2 storages can communicate with IoT they are data
lake and azure blobs
upvoted 1 times

To deploy several million sensors goes (Azure IoT Hub) and (Azure Data Lake) to upload data to
Azure. Answer: A. Azure Data Lake D. Azure IoT Hub
upvoted 2 times
dicas

There are two storage services IoT Hub can route messages to -- Azure Blob Storage and Azure
DataLake Storage Gen2 (ADLS Gen2) accounts. Azure Data Lake Storage accounts are
hierarchical namespace-enabled storage accounts built on top of blob storage. Both of these
use blobs for their storage.
upvoted 1 times
absshm

Correct Answer: BC Explanation/Reference: The Azure portal is the web-based portal for
managing Azure. Being web-based, you can use the Azure portal on an iPhone. Azure Cloud
Shell is a web-based command line for managing Azure. You access the Azure Cloud Shell from
the Azure portal. Being web-based, you can use the Azure Cloud Shell on an iPhone. Incorrect
Answers: A: Azure CLI can be installed on MacOS but it cannot be installed on an iPhone. D:
Windows PowerShell can be installed on macOS but it cannot be installed on an iPhone. E: Azure
Storage Explorer is not used to manage Azure web apps. References:
http://www.deployazure.com/management/managing-azure-from-ipad/
upvoted 1 times
absshm

IoT Hub takes the data and 'upload data to Azure' (Data Lake). Link:
https://docs.microsoft.com/en-us/azure/iot-hub/iot-hub-devguide-messages-d2c#azure-
storage-as-a-routing-endpoint
upvoted 1 times
You have an Azure web app.
You need to manage the settings of the web app from an iPhone.
What are two Azure management tools that you can use? Each correct answer presents
a complete solution.
• A. Azure CLI
• B. the Azure portal
• C. Azure Cloud Shell
• D. Windows PowerShell
• E. Azure Storage Explorer
Correct Answer: BC
The Azure portal is the web-based portal for managing Azure. Being web-based, you
can use the Azure portal on an iPhone.
Azure Cloud Shell is a web-based command line for managing Azure. You access the
Azure Cloud Shell from the Azure portal. Being web-based, you can use the
Azure Cloud Shell on an iPhone.
Incorrect Answers:
A: Azure CLI can be installed on MacOS but it cannot be installed on an iPhone.
D: Windows PowerShell can be installed on MacOS but it cannot be installed on an
iPhone.
E: Azure Storage Explorer is not used to manage Azure web apps.
References:
RTT1976

The correct answer is B and C. Anyone with and iPhone (IOS) can acess B) the Azure portal and
C) Azure Cloud Shell to manage an Azure web app settings.
upvoted 100 times
NoriMee

"Azure CLI is a cross-platform command-line program that connects to Azure and executes
administrative commands on Azure resources. Cross platform means that it can be run on
Windows, Linux, or macOS" https://docs.microsoft.com/fr-fr/learn/modules/differentiate-azure-
management-tools/2-explore-azure-management-tools
upvoted 1 times
deletedaccount

macOS not iOS
upvoted 11 times
lilacwine

I must have missed something in this question... You can manage web app settings from the
Azure portal itself and with Azure Cloud Shell (integrated in the portal). Azure CLI depends on
Cloud Shell, that depends on the Azure Portal. Azure portal must be one of the correct answers
upvoted 76 times
JeanTremblay

From iPhone all what you can use is 1- "Azure app"; 2- Azure portal or 3- Azure Cloud shell.
Impossible to use "Azure cli" from an iPhone. There is no Terminal app there. On the Mac, yes
but not from an iPhone.
upvoted 3 times
JeanTremblay

Azure CLI dosent exist on iPhone. Azure webApp must be used or azure cli via azure portal
upvoted 1 times
DariaSi
7 months ago
but azure portal is not TOOL...
upvoted 3 times
Rooks
1 year ago
From MS site https://azure.microsoft.com/en-us/features/azure-portal/mobile-app/#features it
says: Run commands to manage your Azure resources Want to use the command line? Run ad
hoc Azure CLI or PowerShell commands from the Azure mobile app. So the Answer is apparently
right.
upvoted 6 times
Romesh

In that case answer should be A&D but given correct answer is A&C
upvoted 1 times
awssecuritynewbie
9 months ago
you cannot use CLI .. azure mobile app is A WHOLE answer it self! it didn't ask to see what is ran
under it or anything else... you can really make anything fly you can even root your IPHONE but
that is not the answer haha
upvoted 1 times
ConaxLearn
9 months ago
The Azure Mobile App contains the Azure Cloud Shell. So the answer is still the Portal and the
Cloud Shell.
upvoted 3 times
Gerardo1971

Correct answer
upvoted 1 times
CARIOCA
1 month, 1 week ago

justified it?
upvoted 1 times
KnowledgeGain

Option B & C is correct
upvoted 1 times
sams
2 months ago
Retaking the exam today, came here to revise - I had this question come up last week when i
took the exam. just an FYI for others out there
upvoted 1 times
panal
3 months ago
Correct Answer: BC
upvoted 1 times
Shakar

found this on another website Answer : BC Explanation: The Azure portal is the web-based portal
for managing Azure. Being web-based, you can use the Azure portal on an iPhone. Azure Cloud
Shell is a web-based command line for managing Azure. You access the Azure Cloud Shell from
the Azure portal. Being web-based, you can use the Azure Cloud Shell on an iPhone. Incorrect
Answers: A: Azure CLI can be installed on MacOS but it cannot be installed on an iPhone. D:
Windows PowerShell can be installed on MacOS but it cannot be installed on an iPhone. E:
Azure Storage Explorer is not used to manage Azure web apps. References:
upvoted 2 times
Spencer78

the correct answer should be azure cloud shell and azure portal. they are web based services
and are available on iPhone and android phones
upvoted 1 times
nigeldmgriffith

B & C they both work in this scenario.
upvoted 1 times
mikl

Examtopics - you need to correct these answers - they will misguide. Answer here is B and C -
even though I do agree you hardly can call Azure Portal a "tool" since its running in a browser -
Azure CLI will NOT work on a iPhone. "The Azure CLI is available to install in Windows, macOS
and Linux environments. It can also be run in a Docker container and Azure Cloud Shell." Source
: https://docs.microsoft.com/en-us/cli/azure/install-azure-cli
upvoted 3 times
AbhiYad
4 months ago
Question says about tools, sensibly Azure CLI for Mac os and Azure Cloud shell are tools
technically and are right answers. Portal is a centralised site but cannot name it as tool.
upvoted 3 times
BECP
4 months ago
For the macOS platform, you can install the Azure CLI with homebrew package manager.
Homebrew makes it easy to keep your installation of the CLI update to date. The CLI package
has been tested on macOS versions 10.9 and later. However, macOS don't run on iPhones yet.
IOS run on iPhones. Answers B, C
upvoted 2 times
Snowman005
4 months ago
B and C
upvoted 1 times
exadata360

B and C guys!
upvoted 1 times
WD1985

should be BC
upvoted 1 times
goran

B and C
upvoted 2 times
Your company plans to deploy an Artificial Intelligence (AI) solution in Azure.
What should the company use to build, test, and deploy predictive analytics solutions?
• A. Azure Logic Apps

• B. Azure Machine Learning Designer
• C. Azure Batch
• D. Azure Cosmos DB
Correct Answer: B
Azure Machine Learning designer lets you visually connect datasets and modules on an
interactive canvas to create machine learning models.
Reference:
https://docs.microsoft.com/en-us/azure/machine-learning/concept-designer
success101

B is correct
upvoted 24 times
Alicezhang

In my exam today 26/08/2020, choice B has been changed to Azure machine learning designer
upvoted 14 times
Shailesh866

Thank for sharing the info
upvoted 2 times
Gerardo1971

Correct answer
upvoted 1 times
yash1616
1 month, 1 week ago

absolutely
upvoted 1 times
KnowledgeGain

B is Correct
upvoted 1 times
panal

I agree
upvoted 1 times
panal

B is correct
upvoted 1 times
splendidabbey

Yeah, it correct.
upvoted 1 times
boxcombo
5 months ago
is it B?
upvoted 1 times
sunwukong
6 months ago
this question is in the exam, Nov 2020
upvoted 5 times
veer03

Agree, B is correct
upvoted 1 times
Parth9

B is right
upvoted 1 times
georm

B is correct
upvoted 1 times
CloudBoss

correct is B
upvoted 1 times
Jeralds

Correct
upvoted 1 times
Sellotape
i agreee
upvoted 1 times
Vinoduxid

I choose D and lost point the right was B got this question on 30th May 2020
upvoted 5 times
HOTSPOT -
select No.
Hot Area:
Correct
Answer:
Box 1: No -
Azure Advisor does not generate a list of virtual machines that ARE protected by Azure
Backup. Azure Advisor does however, generate a list of virtual that ARE
NOT protected by Azure Backup. You can view a list of virtual machines that are
protected by Azure Backup by viewing the Protected Items in the Azure Recovery
Services Vault.
Box 2: No -
If you implement the security recommendations, you company‫ג‬€™s score will increase,
not decrease.
Box 3: No -
There is no requirement to implement the security recommendations provided by Azure
Advisor. The recommendations are just that, ‫ג‬€˜recommendations‫ג‬€™. They are not
‫ג‬€˜requirements‫ג‬€™.
References:
https://azure.microsoft.com/en-gb/blog/advisor-backup-recommendations/
https://microsoft.github.io/AzureTipsAndTricks/blog/tip173.html
hstorm

1. Azure Advisor can generate a list of VM's "NOT" protected by backup -> NO 2. You are
aiming for an overall score of 100%, Score INCREASE when implementing recommendations ->
NO 3. Microsoft Support is not dependant on recommendations beeing implemented -> NO
upvoted 30 times
Smikky

Secure score is feature of Azure Security center and not Azure Advisor
upvoted 2 times
Vinoduxid

I got this question on 30th May Az-900 Fundamental
upvoted 21 times
Alexandersss

OH, NO, NO, NO.
upvoted 2 times
Gerardo1971
2 weeks, 1 day ago

Correct answer
upvoted 1 times
SilkyS19
2 weeks, 2 days ago

NO-NO-NO 1. No -> Azure Advisor provides recommendations on virtual machines that are
NOT Backed up and will let you enable backup on those virtual machines with just a few clicks.
2. It will Increase not decrease. 3. There is no compulsion
upvoted 1 times
Kavitw
4 weeks ago
correct
upvoted 1 times
CARIOCA
1 month, 1 week ago

justified it?
upvoted 1 times
panal

Correct
upvoted 2 times
Azurite

Got this AS-IS on Jan 24, 2021
upvoted 5 times
xelirec

Tested, Statement 1 is YES; 1 Click on Azure Advisor 2 Choose reliability 3 When "Enable virtual
machine backup to protect your data from corruption and accidental deletion" selected Azure
Advisor shows VM's that do not have backup enabled. Others are correct so final answer is YES,
NO, NO
upvoted 1 times
inf
4 months ago
No, No, No Advisor lists VMs that are not backed up. It does not list those that are backed up.
Thus the first answer is No. https://azure.microsoft.com/en-us/blog/advisor-backup-
recommendations/. Others have explained the last two No's
upvoted 6 times
mikl
Agree.
upvoted 2 times
mikl

https://azure.microsoft.com/en-us/blog/advisor-backup-recommendations/ "With this
announcement, Azure Advisor provides recommendations on virtual machines that are not
backed up and will let you enable backup on those virtual machines with just a few clicks."
upvoted 1 times
Drouck

the first one should be yes : https://docs.microsoft.com/en-us/azure/advisor/advisor-high-
availability-recommendations Protect your virtual machine data from accidental deletion Setting
up virtual machine backup ensures the availability of your business-critical data and offers
protection against accidental deletion or corruption. Advisor identifies virtual machines where
backup isn't enabled and recommends enabling backup. i m fine with No, No for 2nd and 3rd
upvoted 1 times
BZ20

https://azure.microsoft.com/en-us/blog/advisor-backup-recommendations/ Azure Advisor
provides recommendations on virtual machines that are not backed up and will let you enable
backup on those virtual machines with just a few clicks., so the first one should be NO.
upvoted 1 times
nguyenhung1121990
5 months ago
triple NO
upvoted 1 times
SyedMehdi

I found this but I do not think, this cover Azure monitor or only MS support. Microsoft's policy is
to provide a minimum 30 days' notification when customers are required to act in order to avoid
significant degradation to the normal use of the product or service.
upvoted 1 times
Nei2021

I am taking the exam soon and I think I am going to get screwed with all the wrong answers
given on the quizzes- Googiling gives this answer - The Secure score is calculated based on the
ratio between your healthy resources and your total resources. If the number of healthy
resources is equal to the total number of resources, you get the highest Secure Score value
possible for a recommendation, which can go up to 50.Oct 25, 2018. So B is wrong
upvoted 2 times
FAdeel
7 months ago
Can anybody tell me the time period to implement security recommendations?
upvoted 1 times
coder007

There is no time limit
upvoted 1 times
boby88123
8 months ago
hotspot
upvoted 2 times
What can you use to automatically send an alert if an administrator stops an Azure
virtual machine?
• A. Azure Advisor
• B. Azure Service Health
• C. Azure Monitor
• D. Azure Network Watcher
Correct Answer: C
Reference:
https://docs.microsoft.com/en-us/azure/azure-monitor/insights/vminsights-alerts
SilkyS19
2 weeks, 2 days ago

Azure Monitor is correct answer. Azure Service Health provides the health/status of Azure
service. Azure Monitor - Provides Health/Status of your application using insights and logs
upvoted 2 times
KnowledgeGain

Azure Monitor
upvoted 2 times
sdivu17

Isnt that failure in Azure network and answer should be azure service health?
upvoted 1 times
scanonaco

service health is used to monitor services on azure, this is a resource, just one specific vm
upvoted 7 times
daekum
3 weeks, 4 days ago

here is a link on the Monitor Vs Service Health https://azure.microsoft.com/en-au/blog/what-s-
the-difference-between-azure-monitor-and-azure-service-health
upvoted 1 times
DRAG DROP -
Match the Azure services to the correct descriptions.
all.
NOTE: Each correct match is worth one point
Select and Place:
Correct
Answer:
Reference:
https://azure.microsoft.com/en-gb/services/synapse-analytics/
https://docs.microsoft.com/en-us/azure/machine-learning/overview-what-is-azure-ml
https://docs.microsoft.com/en-us/azure/azure-functions/functions-overview
theultimate31

Azure IOT Hub should process data from the sensors . The answers are marked incorrectly
upvoted 76 times
Jeroenlicht

The IoT hub and functions are turned
upvoted 53 times
darratt

Functions is serverless and IOT Hub process data from millions of sensors
upvoted 1 times
Yeldi
1 day, 22 hours ago

Please correct the answer: IoT Hib and Functions should be swapped.
upvoted 2 times
Moonfire

The Iot hub and functions were interchanged.
upvoted 1 times
vermaekansh

Azure IOT Hub is to process data from the sensors. Options are reversed for Azure Functions
and Azure IOT HUB.
upvoted 1 times
alvin12
4 days, 1 hour ago

Functions is serverless
upvoted 1 times
eham757
1 week, 3 days ago

Functions and Hub should be swapped
upvoted 4 times
Deepika2806
2 weeks ago
https://www.examtopics.com/user/theultimate31/Azure IOT Hub processes data from the
sensors and Functions provides serverless computing.
upvoted 1 times
ccc_mb
2 weeks, 1 day ago

swap c and d
upvoted 3 times
OmVerma
2 weeks, 2 days ago

Answer is not correct. Azure IOT Hub processes data from the sensors and Functions provides
serverless computing.
upvoted 3 times
Bursuc03
2 weeks, 2 days ago

Answer is not correct. The last two answers need to be switched.
upvoted 1 times
SSydney
3 weeks, 3 days ago

last two boxes are answer swapped . marked incorrectly .
upvoted 3 times
SAns7
3 weeks, 4 days ago

if u couldnt find error in this que than u should revise prev que sets
upvoted 1 times
nicky_nyasha
4 weeks, 1 day ago

Iot hub and functions are interchanged
upvoted 2 times
Z360
1 month ago
IOT and functions are wrong swap and take note
upvoted 2 times
rbarrela
1 month ago
C and D are interchanged. Please take note
upvoted 5 times
You have an Azure environment.
You need to create a new Azure virtual machine from a tablet that runs the Android
operating system.
What are three possible solutions? Each correct answer presents a complete solution.
• A. Use Bash in Azure Cloud Shell.

• B. Use PowerShell in Azure Cloud Shell.
• C. Use the PowerApps portal.
• D. Use the Security & Compliance admin center.
• E. Use the Azure portal.
Correct Answer: ABE

The Android tablet device will have a web browser (Chrome). That‫ג‬€™s enough to
connect to the Azure portal.
The Azure portal offers three ways to create a VM:
✑ Using the graphical portal.
✑ Using the Azure Cloud Shell using Bash.
✑ Using the Azure Cloud Shell using PowerShell.
darratt
10 hours, 36 minutes ago

Correct Answer
upvoted 1 times
ikholidd
1 week, 4 days ago

absoluty correct
upvoted 1 times
A9j

Correct
upvoted 1 times
KnowledgeGain

ABE is right answer
upvoted 2 times
Socca

Correct
upvoted 1 times
rob_724
2 months ago
Yep, given answer is correct
upvoted 3 times
A team of developers at your company plans to deploy, and then remove, 50 virtual
machines each week. All the virtual machines are configured by using Azure
Resource Manager templates.
You need to recommend which Azure service will minimize the administrative effort
required to deploy and remove the virtual machines.
• A. Azure Reserved Virtual Machine (VM) Instances

• B. Azure DevTest Labs
• C. Azure virtual machine scale sets
• D. Microsoft Managed Desktop
Correct Answer: B
DevTest Labs creates labs consisting of pre-configured bases or Azure Resource
Manager templates.
By using DevTest Labs, you can test the latest versions of your applications by doing
the following tasks:
✑ Quickly provision Windows and Linux environments by using reusable templates and
artifacts.
✑ Easily integrate your deployment pipeline with DevTest Labs to provision on-demand
environments.
✑ Scale up your load testing by provisioning multiple test agents and create pre-
provisioned environments for training and demos.
Reference:
awron_durat

Reserved VMs minimize cost and not administrative effort. Managed Desktop has nothing to do
with this and scale sets is great but the keyword is "developer" and from the docs, Azure
describes DevTest labs as: "Azure DevTest Labs enables developers on teams to efficiently self-
manage virtual machines (VMs) and PaaS resources without waiting for approvals." Making
DevTest Labs the right answer.
upvoted 29 times
KC
8 months ago
Agreed. DevTest Labs also allows allows the administer to set policy, so that they don’t have
much effort in overseeing the VMs. https://docs.microsoft.com/en-us/azure/devtest-
labs/devtest-lab-overview
upvoted 3 times
sushisalmon

was on the exam earlier 05-07-21 keyword is "developer"
upvoted 2 times
Gerardo1971
2 weeks ago
Correct answer
upvoted 1 times
antares5403
1 month ago
this was on my exam 1 week ago
upvoted 1 times
SimonR2

I was a bit confused with this one, but the keyword to everything here is developers. The devs
are deploying the 100 VMs for test purposes. Given answer (B) is correct.
upvoted 1 times
panal
3 months ago
Corret
upvoted 2 times
Tan10

This is a duplicate question. It's already there in Topic 1
upvoted 1 times
MCSA11

B. Azure DevTest Labs
upvoted 1 times
AndyCosStav

developer is the keyword here
upvoted 1 times
stallone
developers is the key
upvoted 4 times
Cloudyuga
11 months ago
given answer is correct Azure Dev/Test Labs
upvoted 2 times
harbaksh
11 months ago
C. It has to be Scale-set ; as requirement is to add / remove VMs https://docs.microsoft.com/en-
us/azure/virtual-machine-scale-sets/overview
upvoted 1 times
Urpiano

Scale sets it's add/remove nodes to a server farm automatically, yes, but the statement doesn't
mention a server farm but only servers, so with DevTest Labs the automatic deployment of 50
differente or not servers can be achieved
upvoted 2 times
HOTSPOT -
select No.
Hot Area:
Correct
Answer:
Box 1: No -
Azure Advisor provides you with a consistent, consolidated view of recommendations
for all your Azure resources. It integrates with Azure Security Center to bring you
security recommendations. You can get security recommendations from the Security
tab on the Advisor dashboard. Examples of recommendations include restricting access
to virtual machines by configuring Network Security Groups, enabling storage
encryption, installing vulnerability assessment solutions.
However, Azure Advisor does not provide recommendations on how to improve the
security of an Azure AD environment.
Box 2: Yes -
Advisor helps you optimize and reduce your overall Azure spend by identifying idle and
underutilized resources. You can get cost recommendations from the Cost tab on the
Advisor dashboard.
Box 3: No.
Azure Advisor does not provide recommendations on how to configure network settings
on Azure virtual machines.
References:
https://docs.microsoft.com/en-us/azure/advisor/advisor-security-recommendations
https://docs.microsoft.com/en-us/azure/advisor/advisor-cost-recommendations
TDAzure

Azure Advisor provides recommendations on high availability, security, performance and cost. so
should not be the first statement also true or Yes?
upvoted 19 times
sbettani

"Advisor is a personalized cloud consultant that helps you follow best practices to optimize your
Azure deployments. It analyzes your resource configuration and usage telemetry and then
recommends solutions that can help you improve the cost effectiveness, performance, high
availability, and security of your Azure resources." Source https://docs.microsoft.com/en-
us/azure/advisor/advisor-overview It has nothing to do with Active Directory
upvoted 102 times
MSAzure900

Superb
upvoted 2 times
rahul10
7 months ago
IF AD is one of my resources , Advisor should tell me how to improve security on it.
upvoted 5 times
Piiri565

Ok got it , Thanks
upvoted 3 times
Maxim_aurl

Security recommendation on threats and vulnerability not AD related configuration
recommendations will be part of Advisor
upvoted 2 times
Piiri565

Yeah, right even I think the same.
upvoted 2 times
RavindraDevkhile

Azure Advisor Provide a recommendation on MFA and it's a part of Active Directory
configuration hence azure advisor provides a recommendation on Azure AD security. for more
detail see the recommendation list on the below URL. https://docs.microsoft.com/en-
us/azure/security-center/security-center-recommendations
upvoted 7 times
Moon

Security recommendation does not cover the Active Directory, as it is upto the Customer to
provision a user or not through AD. Similarly Network security, Advisor can recommend to close
some ports, but not "HOW to configure"!!
upvoted 18 times
roanbaga
1 year, 1 month ago

But recommend close some ports, Isn't recommedation security?
upvoted 4 times
rich2508

Advisor provides recommendations for Application Gateway, App Services, availability sets,
Azure Synapse Analytics, SQL servers, storage accounts, Traffic Manager profiles, and virtual
machines. so 1 and 3 are No.
upvoted 1 times
Gerardo1971
2 weeks ago
Correct answer
upvoted 1 times
DeepMoon
2 weeks, 2 days ago

All 3 answers are yes. Why? Azure Advisor acts as cloud consultant. It generates its
recommendations on Reliability/Security/Performance/Cost/Operational Excellence. All 3 of the
items AAD, Cost, Network are included in them. Don't be lazy and read the one article and jump
to a conclusion. Dig deeper. As for the AAD recommendations it comes under Azure Security
Baseline recommendations which is part of free version of Security Center.
upvoted 1 times
bryaberson
1 month ago
Yes,yes,No https://docs.microsoft.com/en-us/azure/advisor/security-baseline
upvoted 1 times
Min_Thu

Advisor provides recommendations for Application Gateway, App Services, availability sets,
Azure Synapse Analytics, SQL servers, storage accounts, Traffic Manager profiles, and virtual
machines. Azure Advisor also includes your recommendations from Azure Security Center which
may include recommendations for additional resource types. So , A is NO. Advisor is not
recommend AAD
upvoted 1 times
Socca
2 months ago
YYN Azure Advisor provide recommandation for AD security environment. It recommend for
exemple to use MFA for authentication that is related to AD
upvoted 2 times
panal

Given answer is correct.
upvoted 1 times
nigeldmgriffith

N, Y, N ==> Azure Advisor analyses your configurations and usage telemetry and offers
personalised, actionable recommendations to help you optimise your Azure resources for
reliability, security, operational excellence, performance and cost. Keep in mind it looks at the
solution security not AD security.
upvoted 1 times
SarathJD

No,Yes,No
upvoted 1 times
klpdietis

What resources does Advisor provide recommendations for? Advisor provides
recommendations for Application Gateway, App Services, availability sets, Azure Cache, Azure
Data Factory, Azure Database for MySQL, Azure Database for PostgreSQL, Azure Database for
MariaDB, Azure ExpressRoute, Azure Cosmos DB, Azure public IP addresses, Azure Synapse
Analytics, SQL servers, storage accounts, Traffic Manager profiles, and virtual machines. Azure
Advisor also includes your recommendations from Azure Security Center which may include
recommendations for additional resource types.
upvoted 1 times
Danish12

Azure Advisor does provide recommendation for Azure AD, see here
https://docs.microsoft.com/en-us/azure/advisor/security-baseline
upvoted 3 times
nigeldmgriffith
From my understanding of the related documentation 'Azure security baseline' is an ad-on to
Azure Advisor and therefore not applicable. Is my interpretation wrong?
upvoted 1 times
Jaybe

I believe the answer is N Y N. It clearly says in the Microsoft Azure Advisor document.
upvoted 3 times
sreekarv

Azure Advisor provides recommendation on Azure AD too.. Check this link
https://azure.microsoft.com/en-in/updates/asc-august2020/ https://docs.microsoft.com/en-
us/azure/security-center/release-notes#added-support-for-azure-active-directory-security-
defaults-for-multi-factor-authentication Hence, the correct answers are: YES, YES, NO
upvoted 2 times
nigeldmgriffith

From my understanding of the related documentation 'Azure security baseline' is an ad-on to
Azure Advisor and therefore not applicable. Is my interpretation wrong?
upvoted 1 times
VictorVE

"What resources does Advisor provide recommendations for? Advisor provides
recommendations for Application Gateway, App Services, availability sets, Azure Cache, Azure
Data Factory, Azure Database for MySQL, Azure Database for PostgreSQL, Azure Database for
MariaDB, Azure ExpressRoute, Azure Cosmos DB, Azure public IP addresses, Azure Synapse
Analytics, SQL servers, storage accounts, Traffic Manager profiles, and virtual machines." No AD.
upvoted 4 times
jabanto19
I think in the same way.
upvoted 1 times
getazusername

Its Yes, Yes, Yes in my opinion Azure Advisor also includes your recommendations from Azure
Security Center which may include recommendations for additional resource types. 1. "Yes -
"There are also recomendations like "Set up a second global administrator" etc. 2. Is Yes 3. Yes -
You can get recommendations about how to configure your vm. (To close open RDP Ports etc.)
upvoted 1 times
UbuntuLTS --generate-ssh-keys
Solution: From the Azure portal, launch Azure Cloud Shell and select PowerShell. Run
the command in Cloud Shell.
• A. Yes
• B. No
Correct Answer: A
The command can be run in the Azure Cloud Shell. Although this question says you
select PowerShell rather than Bash, the Az commands will work in
PowerShell.
The Azure Cloud Shell is a free interactive shell. It has common Azure tools preinstalled
and configured to use with your account.
To open the Cloud Shell, just select Try it from the upper right corner of a code block.
You can also launch Cloud Shell in a separate browser tab by going to
https://shell.azure.com/bash.
Reference:
https://docs.microsoft.com/en-us/azure/virtual-machines/linux/quick-create-cli
Bobby_Popa

you can run your Bash, and Azure CLI commands in the PowerShell console. It supports both!
upvoted 38 times
Urpiano

I suppose it's correct but launching CMD commands from PowerShell can works or not, it
depends how the CMD command works. Sometimes it's necessary to do suplementary actions:
https://www.powershellmagazine.com/2013/01/02/calling-native-commands-from-powershell/
https://social.technet.microsoft.com/wiki/contents/articles/7703.powershell-running-
executables.aspx?PageIndex=3 https://4sysops.com/archives/use-powershell-to-execute-an-
exe/ Don't know if this Command Shell line can be executed successfuly on PowerShell, and can
test it :-(
upvoted 2 times
DBoss

Powershell support both Azure cli and powershell commands
upvoted 10 times
Gerardo1971

Correct answer
upvoted 1 times
kris09on
4 weeks ago
But the command doesn't say which Subscription to select for creating vm. What happens if I
have multiple Subscriptions in my enterprise account?
upvoted 1 times
Khella
Cloud Shell > powerShell using Azure CLI inside and when it is start up you can get syntax say
TYPE "az" to use azure CLI . so the command will work inside the PowerShell without any error
upvoted 1 times
panal

Correct Answer is A. https://docs.microsoft.com/en-us/azure/virtual-machines/linux/quick-
create-cli
upvoted 1 times
octapus

PS /home/octapus> az vm RequiredArgumentMissingError: the following arguments are
required: _subcommand Try this: 'az vm list' Still stuck? Run 'az vm --help' to view all commands
or go to 'https://aka.ms/cli_ref' to learn more I executed the command in powershell in cloud
shell and this is the response I got. Ofcourse u can't run this command in powershell Answer is
(B)
upvoted 1 times
octapus

NVM. It actually worked!!! Answer is ( A )
upvoted 1 times
mikl

az vm create is BASH syntax. https://docs.microsoft.com/en-us/cli/azure/vm?view=azure-cli-
latest If they answer should be "Yes" the text should say BASH.
upvoted 1 times
Gwak
5 months ago
There are Answer in link. They said we will be installing Ubuntu 16.04 LTS. To show the VM in
action, you'll connect to it using SSH...of course you might using an Azure Cloud Shell.
upvoted 1 times
badrmotayeb

i think we must respect the syntax of powershel and bash so its NO
upvoted 2 times
sreekarv

The answer is YES Will try to create a resource group with the following commands and
understand. az group create --name <resource-group> --location <location> The above
command can be run in both bash and powershell. It doesn't have any dependency on native
(bash or powershell) cmdlets/commands. az commands are compatible with both bash and
powershell. If your script includes any native commands like along with az commands, you need
to use the respective (bash or powershell) environment. Powershell: az group create --name
<resource-group> --location <location> Write-Host "Resource group has been successfully
created" Bash: az group create --name <resource-group> --location <location> echo "Resource
group has been successfully created"
upvoted 3 times
Stuudent

Checked it, accessed Powershell in Cloud Shell, first message that appears: Welcome to Azure
Cloud Shell Type "az" to use Azure CLI Type "help" to learn about Cloud Shell So yeah, you can
use bash in PowerShell, just need to indicate az. Wicked.
upvoted 3 times
prabh11

Cloud Shell provides two experiences to choose from, Bash and PowerShell. Both include access
to the Azure command-line interface called Azure CLI and to Azure PowerShell. Here is the link:
https://docs.microsoft.com/en-us/learn/modules/welcome-to-azure/6-exercise-cloud-shell
upvoted 1 times
Dramirez
8 months ago
The command can be run in the Azure Cloud Shell. Although this question says you select
PowerShell rather than Bash, the Az commands will work in PowerShell.
upvoted 1 times
TDAC

I can confirm 100% that CLI commands will work in Azure Cloud Shell-Powershell. Just tested it
and this is what it says when you open CloudShell-Powershell https://imgur.com/a/o1XGzHP
upvoted 6 times
babufrik
9 months ago
Definition: Azure Cloud Shell is a browser-based environment for PowerShell & Bash CLI
upvoted 1 times
ConaxLearn
9 months ago
Yes you can execute az in PowerShell.
upvoted 1 times
UbuntuLTS
--generate-ssh-keys
Solution: From a computer that runs Windows 10, install Azure CLI. From PowerShell,
sign in to Azure and then run the command.
• A. Yes
• B. No
Correct Answer: B
The command can be run from PowerShell or the command prompt if you have the
Azure CLI installed. However, it must be run on the Windows 10 computer, not in Azure.
References:
latest
alpha

Answer is 'Yes' Install Azure CLI in Windows 10, Run command from Powershell. During
command execution we need to login Azure.
upvoted 31 times
complexxL9
1 month, 1 week ago

Not sure this is correct because of the wording in the solution. Solution: From a computer that
runs Windows 10, install Azure CLI. From PowerShell, sign in to Azure and then run the
command. "From PowerShell, sign in to Azure" - worded like that it might imply that you are
logging in with 'Connect-AzAccount', and to create resources with az cli you need to login with
'az login' Kind of ambiguous question imho.
upvoted 4 times
Salilgen

I agree: https://docs.microsoft.com/en-us/cli/azure/get-started-with-azure-cli
upvoted 4 times
marcusaurelius124

Guys, I just literally tried this and it worked. I downloaded installed Azure CLI on my Windows 10
machine. Ran PowerShell, logged into Azure with the “az login” command, and created a VM
with the “az vm create --resource-group RG1 --name VM1 --image UbuntuLTS --generate-ssh-
keys”. Try it yourself. You can delete the resource group after you are done. It works… The
answer should be A. YES.
upvoted 26 times
ttn

I totally agree !
upvoted 6 times
merry_ace

The answer is yes I believe. The explanation of No is "The command can be run from PowerShell
or the command prompt if you have the Azure CLI installed. However, it must be run on the
Windows 10 computer, not in Azure. " Where in the question it says that they run it from Azure?
It actually says specifically from PowerShell sign in to a Azure not from Azure
upvoted 1 times
Bursuc03
2 weeks, 6 days ago

The response should be Yes. You can run either Azure CLI or the PowerShell Az module from
Windows 10 PowerShell. The question only states you log on to Azure, and use az CLI to create
the VM. That's a basic (correct) scenario.
upvoted 1 times
Kimmi134
1 month, 1 week ago

The answer is Yes. https://docs.microsoft.com/en-us/cli/azure/install-azure-cli-
windows?view=azure-cli-latest&tabs=azure-cli#run-the-azure-cli it states: " Run the Azure CLI
You can now run the Azure CLI with the az command from either Windows Command Prompt or
PowerShell. PowerShell offers some tab completion features not available from Windows
Command Prompt. To sign in, run the az login command. "
upvoted 3 times
98090223

Key word is "UbuntuLTS", not for windows. Answer should be No
upvoted 1 times
GvSt
2 weeks, 5 days ago
facepalm
upvoted 3 times
Teckie
1 month ago
UbuntuLTS is the image to be used for the VM. Not the user's OS.
upvoted 1 times
ptjuanramos
1 month ago
the UbuntuLTS is the image used to create the virtual machine
upvoted 1 times
ShawnKW

I think the answer is NO. The command in question is for running in Azure CLI not PowerShell.
From PowerShell you need to run:- New-AzVM -ResourceGroupName amdemo -Location 'North
Europe' -Name vmdemo
upvoted 2 times
chucklu

after you install Azure cli, you can run az login on command prompt or PowerShell directly.
upvoted 1 times
aymen86

the CLI is across platform tool and alow users to execute their commands through a Terminal or
command prompet not from Powerschell
upvoted 1 times
AnujGupta

Answer is Yes. The command can be run from PowerShell or the command prompt if you have
the Azure CLI installed. Reference: https://docs.microsoft.com/en-us/cli/azure/install-azure-cli-
windows?view=azure-cli-latest&tabs=azure-cli
upvoted 2 times
vit100

I see majority of people think answer should be Yes, and I agree with it. But what is correct
answer for the exam? Exam can have mistake... there are a lot of examples like this...
upvoted 2 times
arcturus10

it's Yes 100%
upvoted 2 times
caklov

Thinking the point is that it can be run outside of Azure env. When running that commanc in the
Windows vm within Azure, it would be an issue?
upvoted 1 times
caklov

I tried az login in PS and it worked to create that vm.
upvoted 1 times
caklov

I installed azure cli. Opened PS. Ran Connect-AzAccount. The term 'Connect-AzAccount' is not
recognized as the name of a cmdlet. So for me it's NO.
upvoted 1 times
chucklu
You should run az login
upvoted 1 times
rob_724

This question makes no sense.. It should be Yes. I mean -- it was said that the user logged in b4
running the command. And AZ CLI was installed. AZ CLI still works even on win10 PS...
upvoted 1 times
SnakePlissken

The answer is definitely YES! "Download and install the current release of the Azure CLI. You can
now run the Azure CLI with the az command from either Windows Command Prompt or
PowerShell. To sign in, run the az login command." https://docs.microsoft.com/en-
us/cli/azure/install-azure-cli-windows?tabs=azure-cli#install-or-update
upvoted 3 times
Billybob0604

powershell and azure cli are meant to run locally. if you want to run from azure use cloud shell.
so run the command mentioned right away in either cli or powershell
upvoted 1 times
UbuntuLTS
--generate-ssh-keys
Solution: From a computer that runs Windows 10, install Azure CLI. From a command
prompt, sign in to Azure and then run the command.
• A. Yes
• B. No
Correct Answer: B
The command can be run from PowerShell or the command prompt if you have the
Azure CLI installed. However, it must be run on the Windows 10 computer, not in Azure.
References:
latest
Maivicloud

The answer should ne YES. Because Azure CLI need to log in with the command az login. The
solution answer "No" is the wrong answer. https://docs.microsoft.com/en-us/cli/azure/install-
azure-cli-windows?view=azure-cli-latest&tabs=azure-cli
upvoted 36 times
woodmanhu

The answer should be "Yes" as the question states to log in Azure FROM command prompt
instead of Run Azure CLI command FROM Azure after you log into Azure portal on the website.
upvoted 10 times
bcamposq1995

it should be yes. "You can now run the Azure CLI with the az command from either Windows
Command Prompt or PowerShell. PowerShell offers some tab completion features not available
from Windows Command Prompt. To sign in, run the az login command." link:
https://docs.microsoft.com/en-us/cli/azure/install-azure-cli-windows?tabs=azure-cli
upvoted 1 times
bcamposq1995
1 day, 3 hours ago

it should be yes. "You can now run the Azure CLI with the az command from either Windows
Command Prompt or PowerShell. PowerShell offers some tab completion features not available
from Windows Command Prompt. To sign in, run the az login command." link:
https://docs.microsoft.com/en-us/cli/azure/install-azure-cli-windows?tabs=azure-cli
upvoted 1 times
Franco11
1 week, 4 days ago

Answer Should be yes, u can run command from CMD or Powershell when Azure CLI is installed
latest&tabs=azure-cli
upvoted 3 times
Alexandersss
2 weeks, 4 days ago

ASNWER IS NO! Prompt command not have the command POWERSHELL!
upvoted 2 times
nileshkhode
2 weeks, 6 days ago

Answer should be YES
upvoted 2 times
Bursuc03
2 weeks, 6 days ago

The response should be yes. You can run az CLI from the command prompt in Windows 10,
connect to Azure (az login), then run the command and create the VM.
upvoted 2 times
shanibpatel
3 weeks, 2 days ago

Answer should be Yes!!!
upvoted 1 times
venkatbv
1 month, 1 week ago

The answer should be Yes.The command can be run from PowerShell or the command prompt if
you have the Azure CLI installed.
upvoted 3 times
AnujGupta

The command can be run from PowerShell or the command prompt if you have the Azure CLI
installed. Reference: https://docs.microsoft.com/en-us/cli/azure/install-azure-cli-
windows?view=azure-cli-latest&tabs=azure-cli
upvoted 2 times
Min_Thu

why ans is NO ? we can sign in azure using az login in command prompt or power shell in win
10 after install azure cli
upvoted 1 times
jvpenna18
2 months ago
Its 'YES", this question is a play on words. "From a computer that runs Windows 10, install Azure
CLI. From a command prompt, sign in to Azure and then run the command." The assumption is
that you are opening the command prompt from the same Windows 10 machine you are
installing Azure CLI. Therefore, the CLI installation would be in use if you opened a command
prompt. Yes is correct.
upvoted 4 times
caklov

worked for me here so yes.
upvoted 2 times
smgjAZ

YES https://docs.microsoft.com/en-us/azure/virtual-machines/linux/quick-create-cli confirm the
commands used States that cli can be installed/run from win10, and the login process to the az
account from cli https://docs.microsoft.com/en-us/cli/azure/install-azure-cli-
windows?tabs=azure-cli >> az login "If the CLI can open your default browser, it will do so and
load an Azure sign-in page."
upvoted 1 times
jint

answer is no.There is difference betwen bash and powershell commands. powershell command
for vm creation is New-AzVm ` -ResourceGroupName "myResourceGroup" ` -Name "myVM" ` -
Location "East US" ` -VirtualNetworkName "myVnet" ` -SubnetName "mySubnet" ` -
SecurityGroupName "myNetworkSecurityGroup" ` -PublicIpAddressName "myPublicIpAddress" `
-OpenPorts 80,3389
upvoted 1 times
Ganjalf420

This should be "YES", you can run it wit those steps.
upvoted 2 times
HOTSPOT -
Several support engineers plan to manage Azure by using the computers shown in the
following table:
You need to identify which Azure management tools can be used from each computer.
What should you identify for each computer? To answer, select the appropriate options
in the answer area.
Hot Area:
Correct
Answer:
Previously, the Azure CLI (or x-plat CLI) was the only option for managing Azure
subscriptions and resources from the command-line on Linux and macOS. Now with the
open source and cross-platform release of PowerShell, you‫ג‬€™ll be able to manage all
your Azure resources from Windows, Linux and macOS using your tool of choice, either
the Azure CLI or Azure PowerShell cmdlets.
The Azure portal runs in a web browser so can be used in either operating system.
Reference:
https://buildazure.com/2016/08/18/powershell-now-open-source-and-cross-platform-
linux-macos-windows/
sbettani

Azure CLI can be installed everywhere https://docs.microsoft.com/en-us/cli/azure/install-azure-
cli?view=azure-cli-latest Azure portal can be accessed everywhere (using a browser) And Azure
powershell can be run on every system https://docs.microsoft.com/en-
us/powershell/azure/install-az-ps?view=azps-3.1.0
upvoted 67 times
1 year, 1 month ago
powershell cmdlets can run in every system. thus azure can be installed / grabbed on every
system, as wel.
upvoted 4 times
hfpb010

How Can Azure Portal not be an option? It's a browser based management! I understand you
might not like it, but it's still a valid option. So the anwser is correct.
upvoted 19 times
1 year, 1 month ago

he might not like it LOL
upvoted 19 times
t213

upvoted 1 times
aks007
1 week ago
Is there any difference between the powershell installed in the machine and Azure powershell. If
yes then azure portal is already there what is the role of azure powershell there.
upvoted 1 times
sushisalmon
1 week, 3 days ago

This was on the exam May 7, 2021. I answered the same.
upvoted 3 times
anirban7172
1 week, 1 day ago

You cleared the exam? Share some more questions please.
upvoted 1 times
Gerardo1971
2 weeks ago
Correct answer
upvoted 2 times
freshmaker
1 month, 1 week ago

got this q
upvoted 1 times
Sam_ugo

The answers are definitely correct
upvoted 1 times
Velben27

I wasn't sure what they were asking
upvoted 1 times
panal

Answers are correct
upvoted 2 times
Cappu

This question appeared in the exam today. 11/21
upvoted 3 times
Raunak_Tiwari
All the Answers are correct.
upvoted 2 times
brandotiago

This was on the exam. answered it the same way as the here
upvoted 1 times
svw2020

Azure CLI is cross platform hence it is applicable for all Azure Portal is browser based hence it is
applicable for all To execute Azure Powershell - you need windows powershell or poweshell core
( it is cross platform) - hence it is applicable for all
upvoted 2 times
raunaqt90
4 months ago
They didn't mention Poweshell Core for Ubuntu and Mac
upvoted 1 times
MSOffice

Previously, the Azure CLI (or x-plat CLI) was the only option for managing Azure subscriptions
and resources from the command-line on Linux and macOS. Now with the open source and
cross-platform release of PowerShell, you’ll be able to manage all your Azure resources from
Windows, Linux and macOS using your tool of choice, either the Azure CLI or Azure PowerShell
cmdlets. The Azure portal runs in a web browser so can be used in either operating system.
References: https://buildazure.com/2016/08/18/powershell-now-open-source-and-cross-
platform-linux-macos-windows/
upvoted 1 times
RNG60FR

correct. All details in the Microsoft Learn : Azure Management options
(https://docs.microsoft.com/en-us/learn/modules/tour-azure-portal/2-azure-management)
upvoted 1 times
Hasi123

This came for the exam and the given answers are correct
upvoted 4 times
HOTSPOT -
Hot Area:
Correct
Answer:
maaten
1 day, 17 hours ago

Service Trust Portal is the right answer... https://servicetrust.microsoft.com/ComplianceManager
upvoted 1 times
pprajapa

Answer should be Microsoft 365 admin center. https://docs.microsoft.com/en-us/microsoft-
365/compliance/microsoft-365-compliance-center?view=o365-worldwide Under FAQ section.
"To go there, in the Microsoft 365 compliance center, in the navigation pane on the left side of
the screen, choose More resources, and then, under Office 365 Security & Compliance Center,
choose Open."
upvoted 1 times
XDPhoenixx
1 week ago
Answer should be Microsoft 365 Admin Center: "Compliance Manager has moved from the
Service Trust Portal to its new location in the Microsoft 365 compliance center. All customer data
has been moved over to the new location, so you can continue using Compliance Manager
without interruption. Refer to the Compliance Manager documentation for setup information
and to learn about new features. Although the classic version of Compliance Manager remains
in the Service Trust Portal, all users are encouraged to use Compliance Manager in the Microsoft
365 compliance center." https://docs.microsoft.com/en-us/microsoft-365/compliance/get-
started-with-service-trust-portal?view=o365-worldwide
upvoted 4 times
fuddyduddy
1 week ago
At time of writing, there are 2 correct answers: * Service Trust Portal -> Compliance Manager
(Classic) * Microsoft 365 Admin Center -> Compliance. aka https://compliance.microsoft.com.
This is also available from Service Trust Portal -> Compliance Manager
upvoted 2 times
jc358449
1 week, 3 days ago

Azure Portal is mother of all then why not Azure portal will be the answer ? This is bigger set
and should be correct always, pls correct me if I am wrong.
upvoted 2 times
jc358449
1 week, 3 days ago

What ans is set in the exam to pass does anybody or the admin of this website knows? What I
read from the documentation is still correct ans is Trust Portal but very soon will be removed, so
confusing..
upvoted 1 times
toniiiy
1 week, 3 days ago

Compliance Manager is now generally available (GA) as an end-to-end compliance management
solution inside the Microsoft 365 compliance center. With this release, Compliance Manager
completes the transition from its previous location in the Microsoft Service Trust Portal.
upvoted 2 times
0byte
1 week, 4 days ago

For what I can see Compliance Manager can be accesses from two places these days: Service
Trust Portal > Compliance Manager > Compliance Manager M365 Admin Center > Compliance
(under Admin Centers) I think the latter is the latest addition.
upvoted 1 times
NachiketAzure
1 week, 5 days ago

Accessing Compliance Manager Go to https://servicetrust.microsoft.com. Sign in with your Azure
Active Directory (Azure AD) user account. In the Service Trust Portal, click Compliance Manager.
Microsoft Service Trust Portal is the correct answer
upvoted 4 times
Franco11
1 week, 4 days ago

That's Correct!
upvoted 1 times
Akrana
1 week, 5 days ago

The correct answer is "Service trust Poral" https://docs.microsoft.com/en-us/microsoft-
365/compliance/meet-data-protection-and-regulatory-reqs-using-microsoft-cloud
upvoted 1 times
Lyonel
1 week, 6 days ago

Here's what I found... Compliance Manager is now generally available (GA) as an end-to-end
compliance management solution inside the Microsoft 365 COMPLIANCE CENTER. With this
release, Compliance Manager completes the transition from its previous location in the
Microsoft Service Trust Portal. The location appears to previously be at the Microsoft 365
COMPLIANCE CENTER, not admin center as specified in the question. Also, if the question is
"pre-GA", then the CORRECT ANSWER would be "Service Trust Portal", which was the previous
location as noted in the following link. LINK: https://docs.microsoft.com/en-us/microsoft-
365/compliance/compliance-manager?view=o365-worldwide
upvoted 3 times
jc358449
1 week, 1 day ago

Just tell one thing, isn't everything goes under Azure Portal once there is an option available
Azure Portal? Without azure portal can you enter to Trust Portal?
upvoted 1 times
dkpal
1 week, 6 days ago

Seems like Microsoft Service Trust Portal is the answer as stated here :
https://techcommunity.microsoft.com/t5/security-compliance-identity/use-compliance-
manager-and-service-trust-portal-to-enhance-your/ba-p/196965 There is a 2 minute video in
the second half on the page, and at the end it states to use Compliance Manager at the Service
Trust Portal (servicetrust.microsoft.com)
upvoted 3 times
Alexandersss
2 weeks, 1 day ago

Wrong, answer right is 365 admin center : https://docs.microsoft.com/it-it/microsoft-
365/compliance/compliance-manager-setup?view=o365-worldwide
upvoted 1 times
hcross
2 weeks, 1 day ago

In my opinion correct answer is Security Trust Center. Anyway I believe Compliance manager has
been moved to https://compliance.microsoft.com/homepage
upvoted 2 times
Your Azure environment contains multiple Azure virtual machines.
You need to ensure that a virtual machine named VM1 is accessible from the Internet
over HTTP.
Solution: You modify an Azure firewall.
• A. Yes
• B. No
Correct Answer: A
Azure Firewall is a managed, cloud-based network security service that protects your
Azure Virtual Network resources. It's a fully stateful firewall as a service with built-in high
availability and unrestricted cloud scalability.
In this question, we need to add a rule to Azure Firewall to allow the connection to the
virtual machine on port 80 (HTTP).
References:
https://docs.microsoft.com/en-us/azure/firewall/overview
foreverlearner
Highly Voted1 year ago

You can either modify a firewall or modify a NSG. For basic allow/deny traffic, NSG is enough.
But the same can be achieved with Firewall as well. "The Azure Firewall service complements
network security group functionality. Together, they provide better "defense-in-depth" network
security. Network security groups provide distributed network layer traffic filtering to limit traffic
to resources within virtual networks in each subscription. Azure Firewall is a fully stateful,
centralized network firewall as-a-service, which provides network- and application-level
protection across different subscriptions and virtual networks." https://docs.microsoft.com/en-
us/azure/firewall/firewall-faq
upvoted 22 times
Chris0105
1 month, 1 week ago

You are right. see as well question #133, so it must be firewall or NSG. I actually thought it was
just NSG - seems I am wrong.
upvoted 2 times
lehoang15tuoi

Your logic is not clear. To put it simply, both Firewall and NSG can be used to block traffic. Think
of them like 2 gates on the same walkway. You open one and close one, can you pass through
both? The NSG default rule is blocking all inbound traffic, so if you don’t do anything with it, it
doesn’t matter what you do with the firewall.
upvoted 4 times
PhilB1000

https://docs.microsoft.com/en-us/azure/firewall/firewall-faq#what-is-the-difference-between-
network-security-groups-nsgs-and-azure-firewall What is the difference between Application
Gateway WAF and Azure Firewall? The Web Application Firewall (WAF) is a feature of Application
Gateway that provides centralized inbound protection of your web applications from common
exploits and vulnerabilities. Azure Firewall provides inbound protection for non-HTTP/S
protocols (for example, RDP, SSH, FTP), outbound network-level protection for all ports and
protocols, and application-level protection for outbound HTTP/S.
upvoted 13 times
Kavitw

correct answer
upvoted 1 times
CARIOCA
1 month, 1 week ago

justified it?
upvoted 1 times
Tas006

Answer is A. This question came out on the 05.03.2021
upvoted 1 times
rob_724
2 months ago
while modifying azure firewall 'can' help -- firewall is not a default service and it is not assumed
that it has been already enabled.
upvoted 1 times
hercu
2 months ago
I think that the following quote resolves all doubts as it sounds clear enough. “The Web
Application Firewall (WAF) is a feature of Application Gateway that provides centralized inbound
protection of your web applications from common exploits and vulnerabilities. Azure Firewall
provides inbound protection for non-HTTP/S protocols (for example, RDP, SSH, FTP), outbound
network-level protection for all ports and protocols, and application-level protection for
outbound HTTP/S.” References: https://docs.microsoft.com/en-us/azure/firewall/firewall-faq
Comment: Azure firewall is not intended for inbound HTTP/S protection. This means that only
the variant with "You modify a network security group (NSG)." in the other similar question is
correct. Hope it helps :)
upvoted 2 times
JohnBB

NO is the correct answer. Explanation: https://docs.microsoft.com/en-us/azure/firewall/firewall-
faq#are-network-security-groups--nsgs--supported-on-the-azurefirewallsubnet Does Azure
Firewall support inbound traffic filtering? Inbound protection is typically used for non-HTTP/S
protocols
upvoted 3 times
Diezvai
1 month, 1 week ago
Agree. Example "in front of you is a house with fence and gates - just by opening the gates in
the fence you are not guaranteed to be able to enter the house - you need to open the doors!"
upvoted 1 times
Pinscher

The firewall can allow traffic to pass but the VM is still not accessible from the internet if you
don't set up a public IP or some routing. Given that the answer should be no as there is no way
to call the VM even if the firewall is open.
upvoted 3 times
Pinscher

The firewall can allow traffic to pass but the VM is still not accessible from the internet if you
don't set up a public IP or some routing. Given that the answer should be no as there is no way
to call the VM even if the firewall is open.
upvoted 1 times
Khella

Correct
upvoted 1 times
omenstrike2

Agree. Firewall is one of the things you need to check, along with NSG and correct network
configuration. The question ask if the statement is true. It does not mean that that is the only
thing required to access the internet.
upvoted 2 times
Olabua

Lovely site!
upvoted 2 times
nigeldmgriffith
4 months ago
A; configuring the firewall will facilitate the desired result.
upvoted 2 times
pechuga

The answer A is correct!
upvoted 1 times
AshokRao

Answer is NO. NSG has to be modified
upvoted 2 times
Fabi777

1- question says: the machine must be reachable via HTTP, therefore FROM the outside now, FW
provides INBOUND protection for NON-HTTP/s traffic and OUTBOUND protection for ALL
ports/protocols If we just consider those two aspects of az FW the correct answer should be B,
so NO
upvoted 2 times
over HTTP.
Solution: You modify an Azure Traffic Manager profile.
• A. Yes
• B. No
Correct Answer: B
Azure Traffic Manager is a DNS-based load balancing solution. It is not used to ensure
that a virtual machine named VM1 is accessible from the Internet over
HTTP.
To ensure that a virtual machine named VM1 is accessible from the Internet over HTTP,
you need to modify a network security group or Azure Firewall.
In this question, we need to add a rule to a network security group or Azure Firewall to
allow the connection to the virtual machine on port 80 (HTTP).
References:
https://docs.microsoft.com/en-us/azure/traffic-manager/traffic-manager-overview
pcce5w2hlh

Answer is B. Becoz Traffic Manager is used to distribute traffic at DNS level across different
regions.
upvoted 55 times
Clouddog

https://azure.microsoft.com/nl-nl/resources/videos/how-azure-traffic-manager-works/
upvoted 2 times
gassen

just for the future If the Question doesn't raise any question please stop posting comments, it's
a source of frustration and Confusion
upvoted 32 times
Enits

Its good to get broader perspective from different people
upvoted 1 times
nick1970

100 thumbs up. So true.
upvoted 1 times
MickeyG
9 months ago
I agree, but only when users just respond with "correct" or "A is correct". This adds nothing for
the rest of us. I enjoy having context why options are invalid or valid. But responding with just
the letter that is the answer is not helpful to anyone
upvoted 8 times
Piiri565

I think comments make the concepts to understand much better, just by knowing the answer
and moving to the next question.Let the people connect .Its the source of Knowledge
upvoted 5 times
panal

Answer is B.
upvoted 1 times
LTI_Bois

Ans is B
upvoted 1 times
gyxo

my exam is today, wish me luck
upvoted 6 times
Ebenezer

You need to modify an Azure Firewall.
upvoted 1 times
AmyBdz

Yes, B.
upvoted 1 times
GeneCarl

True letter b
upvoted 1 times
DDV

perfect comments are very useful, please continue doing as it helps in the learning journey
upvoted 1 times
MK1368

B answer
upvoted 1 times
stace

no is correct
upvoted 1 times
emraanmeer

correct
upvoted 1 times
JohnathhanWick
1 year, 1 month ago

azure firewall.....as the previous question
upvoted 2 times
MPAzureTraining900

You modify an Azure firewall. Correct Answer is B
upvoted 3 times
Your company plans to deploy several web servers and several database servers to
Azure.
You need to recommend an Azure solution to limit the types of connections from the
web servers to the database servers.
• A. network security groups (NSGs)

• B. Azure Service Bus
• C. a local network gateway
• D. a route filter
Correct Answer: A
A network security group works like a firewall. You can attach a network security group
to a virtual network and/or individual subnets within the virtual network.
You can also attach a network security group to a network interface assigned to a virtual
machine. You can use multiple network security groups within a virtual network to
restrict traffic between resources such as virtual machines and subnets.
You can filter network traffic to and from Azure resources in an Azure virtual network
with a network security group. A network security group contains security rules that
allow or deny inbound network traffic to, or outbound network traffic from, several types
of Azure resources.
References:
https://docs.microsoft.com/en-us/azure/virtual-network/security-overview
sheddy

Keyword is "several". You will want to use a group for multiple VMs traffic rules.
upvoted 21 times
Rainman
but i was expecting to see either "A fire wall" or "multiple NSGs" .
upvoted 3 times
LexusNX425

You could have multiple VMs in a single NSG
upvoted 3 times
success101

A is correct
upvoted 17 times
shashu07
6 months ago
Keyword is "web servers and several database servers to Azure" ie internal traffic to VMs, so
answer is NSG. We can consider Firewall, its point to external traffic to VMs
upvoted 10 times
kaushu400

oh really?
upvoted 14 times
nexter

oh yeah
upvoted 36 times
getazusername

ouh yeah!
upvoted 1 times
Gerardo1971

Correct answer
upvoted 1 times
Siwe
2 weeks, 4 days ago

Definately NSG
upvoted 1 times
shalinics1211111
1 month ago
am not having the access to see all the questions, can these 100 questions sufficient
upvoted 1 times
sdas2021

A is correct. This came in the test yesterday.
upvoted 2 times
panal

Answer is B.
upvoted 2 times
FabiZamora93
4 weeks, 1 day ago

You comment on all questions but never justify...
upvoted 3 times
serget12

I would think an Application Gateway would work best
upvoted 1 times
AcetheTest

I took connection "type" to mean protocol, which is an option within network security groups.
the word "limit" might throw someone off, but ultimately limiting the protocols just means
picking and choosing which ones are okay. "For each rule, you can specify source and
destination, port, and protocol." https://docs.microsoft.com/en-us/azure/virtual-
network/network-security-groups-overview
upvoted 1 times
Stuudent

Was on exam today.
upvoted 8 times
AppleVan
8 months ago
Why is local network gateway is not right?
upvoted 2 times
Stuudent

I guess the reasoning is that it network gateways are primarily used to connect on-prem
network with cloud, not to limit access between devices. IF you think about it, if you put
databases on a separate network, you will still need NSGs to regulate access to this network.
upvoted 2 times
Saman25

We don't have the option of application security group but this can be achieved using NSG also
by placing web servers and database servers in different subnets. therefore, A is correct.
upvoted 3 times
Meatface
NSG can't limit "types of connections"
upvoted 1 times
AshishKu
9 months ago
I think the answer should be Application Security Group. Which is not present in the options.
upvoted 5 times
kmhuis
9 months ago
Wait, NSG either allow or deny. They do not "limit". I dont really understand why this wouldnt be
azure firewall. (I realize its not a option)
upvoted 3 times
daskive

i'm expecting a application security group
upvoted 8 times
NItesh

ASG is only used for grouping. You will still need NSG for blocking the access between ASGs.
upvoted 1 times
juanvenegasb

gracias por indicar que la respuesta correcta es la A...
upvoted 5 times
HOTSPOT -
Hot Area:
Correct
Answer:
You would use the Azure Activity Log, not Access Control to view which user turned off
a specific virtual machine during the last 14 days.
Activity logs are kept for 90 days. You can query for any range of dates, as long as the
starting date isn't more than 90 days in the past.
In this question, we would create a filter to display shutdown operations on the virtual
machine in the last 14 days.
Reference:
https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-audit
Figgy_123

Absolutely Right
upvoted 2 times
yesican
1 month, 1 week ago

yes, i, can
upvoted 2 times
panal
Correct
upvoted 4 times
kanak01

Admin should restrict this guy from posting any comment
upvoted 1 times
Which service provides network traffic filtering across multiple Azure subscriptions and
virtual networks?
• A. Azure Firewall
• B. an application security group
• C. Azure DDoS protection
• D. a network security group (NSG)
Correct Answer: A
You can restrict traffic to multiple virtual networks in multiple subscriptions with a single
Azure firewall.
You can centrally create, enforce, and log application and network connectivity policies
across subscriptions and virtual networks. Azure Firewall uses a static public IP address
for your virtual network resources allowing outside firewalls to identify traffic originating
from your virtual network.
References:
vate01

I was here.
upvoted 15 times
sandeep1111

correct
upvoted 1 times
alex100

You were not alone ;)
upvoted 11 times
tartar

why not NSG?
upvoted 13 times
Omar5

It says "what service", NSG is not an Azure service.
upvoted 6 times
winston_45

NSG is for traffic inside a same virtual network, not a gateway between several networks.
upvoted 23 times
Min_Thu

The Azure Firewall service complements network security group functionality. Together, they
provide better "defense-in-depth" network security. Network security groups provide distributed
network layer traffic filtering to limit traffic to resources within virtual networks in each
subscription. Azure Firewall is a fully stateful, centralized network firewall as-a-service, which
provides network- and application-level protection across different subscriptions and virtual
networks. NSG can filter network within subscription and Azure firewall is across different
subscription. So Ans is Azure Firewall
upvoted 8 times
panal
Correct
upvoted 2 times
Olabua

This site is unique.
upvoted 4 times
Azurite

The answer Azure firewall is correct. Azure network security group (NSG) is used to filter network
traffic to and from Azure resources in an Azure virtual network. Event within a VNET, NSG rules
can become difficult to manage in large environments that contain multiple subnets and virtual
machines. Ofcourse Application Security Groups (ASGs) come to the rescue which allows to
logically group of virtual machines that allows you to apply security rules at scale. The question
specifically asks for restricting traffic to multiple virtual networks in multiple subscriptions. NSG
stands no chance. Only, Azure Firewall can be used for this which is a highly available, managed
firewall service that filters network and application level traffic. It has the ability to process traffic
across subscriptions and VNets that are deployed in a hub-spoke model.
upvoted 4 times
theOtherGuy

The Keyword here is across subscriptions. "You can centrally create, enforce, and log application
and network connectivity policies across subscriptions and virtual networks"
upvoted 7 times
TDAC

A is the correct answer. From here: https://docs.microsoft.com/en-us/azure/firewall/overview
"You can centrally create, enforce, and log application and network connectivity policies across
subscriptions and virtual networks. "
upvoted 4 times
trev
A Firewall What is the difference between Network Security Groups (NSGs) and Azure Firewall?
The Azure Firewall service complements network security group functionality. Together, they
provide better "defense-in-depth" network security. Network security groups provide distributed
network layer traffic filtering to limit traffic to resources within virtual networks in each
subscription. Azure Firewall is a fully stateful, centralized network firewall as-a-service, which
provides network- and application-level protection across different subscriptions and virtual
networks. https://docs.microsoft.com/en-us/azure/firewall/firewall-faq
upvoted 5 times
Marusyk

It's NSG. The same question is on Academy portal
upvoted 2 times
gelato

An NSG is a firewall, albeit a very basic one. It's a software-defined solution that filters traffic at
the Network layer. However, Azure Firewall is more robust. It's a managed firewall service that
can filter and analyze L3-L4 traffic, as well as L7 application traffic
upvoted 8 times
Simhaval

So answer is Firewall right ?
upvoted 5 times
gelato

NSG! You can use Azure network security group to filter network traffic to and from Azure
resources in an Azure virtual network. A network security group contains security rules that allow
or deny inbound network traffic to, or outbound network traffic from, several types of Azure
resources. For each rule, you can specify source and destination, port, and protocol.
upvoted 3 times
iWasTed
10 months ago
NSG is for traffic inside a same virtual network, not a gateway between several networks.
upvoted 12 times
Which Azure service should you use to store certificates?
• A. Azure Security Center

• B. an Azure Storage account
• C. Azure Key Vault
• D. Azure Information Protection
Correct Answer: C
Azure Key Vault is a secure store for storage various types of sensitive information
including passwords and certificates.
Azure Key Vault can be used to Securely store and tightly control access to tokens,
passwords, certificates, API keys, and other secrets.
Secrets and keys are safeguarded by Azure, using industry-standard algorithms, key
lengths, and hardware security modules (HSMs). The HSMs used are
Federal Information Processing Standards (FIPS) 140-2 Level 2 validated.
Access to a key vault requires proper authentication and authorization before a caller
(user or application) can get access. Authentication establishes the identity of the caller,
while authorization determines the operations that they are allowed to perform.
References:
https://docs.microsoft.com/en-us/azure/key-vault/key-vault-overview
MartinMystere

Certificate Management - Azure Key Vault is also a service that lets you easily provision,
manage, and deploy public and private Secure Sockets Layer/Transport Layer Security (SSL/TLS)
certificates for use with Azure and your internal connected resources
upvoted 13 times
success101

C is correct
upvoted 7 times
Gerardo1971
Correct answer
upvoted 1 times
rob_724
2 months ago
yes its key vault -- i speak from experience. we set up cdn and for custom domains needing
certs (to avoid cert mismatch issues) they are stored on key vault
upvoted 1 times
panal

Correct
upvoted 2 times
kjon16

C should be correct
upvoted 1 times
vmn52222

c is correct
upvoted 1 times
MK1368

c is correct
upvoted 1 times
Cloudyuga
11 months ago
yes it C.Azure Key Vault
upvoted 1 times
sniper999

Azure Key Vault is correct for managing certificates.
upvoted 1 times
HOTSPOT -
select No.
Hot Area:
Correct
Answer:
Box 1: No -
Azure firewall does not encrypt network traffic. It is used to block or allow traffic based
on source/destination IP address, source/destination ports and protocol.
Box 2: No -
A network security group does not encrypt network traffic. It works in a similar way to a
firewall in that it is used to block or allow traffic based on source/ destination IP address,
source/destination ports and protocol.
Box 3: No -
The question is rather vague as it would depend on the configuration of the host on the
Internet. Windows Server does come with a VPN client and it also supports other
encryption methods such IPSec encryption or SSL/TLS so it could encrypt the traffic if
the Internet host was configured to require or accept the encryption.
However, the VM could not encrypt the traffic to an Internet host that is not configured to
require the encryption.
Reference:
https://docs.microsoft.com/en-us/azure/security/azure-security-data-encryption-best-
practices#protect-data-in-transit
Salilgen
I think last answer is YES: Windows 2016 can encrypt data
upvoted 17 times
werbinich

Ok, but could you please mention the feature or technique which Win16 uses to encrypt
network traffic ?
upvoted 2 times
SimonR2

Transport Layer Securtiy (TLS)
upvoted 3 times
hercu

Box 3 is also "NO". You cannot encrypt ALL kind of traffic from Azure VMs sent to the Internet!
You can only encrypt traffic between two TRUSTED endpoints. Obviously the Internet isn't the
trusted endpoint. In order to make it work, the use of a VPN gateway is required, and then the
traffic can be encrypted "over" the public connection - Internet, between Azure VMs/vNets and
the trusted on-premises locations. "You can use an Azure VPN gateway to send encrypted traffic
between your virtual network and your on-premises location across a public connection, or to
send traffic between virtual networks." References: https://docs.microsoft.com/en-
us/azure/security/fundamentals/encryption-overview
upvoted 12 times
SimonR2

There is no VPN gateway required. This is simply asking about enrypting network traffic which
pretty much every webserver in existance is able to do, whether its based on the internet or
internal network communications. The two endpoints don't necessarily have to trust each other.
Its usually one-sided unless with the server needing to prove its trustworthy, unless there is
client cert authentication too. All that needs to happen is that a server presents a public cert on
the initial client connection and the client decides whether or not to trust the server during the
TLS handshake. This depends on details on the cert such as the CA and available ciphers they
agree upon. Once the TLS handshake is completed and both sides have the the symmetric keys
then the server begins encrypting data and sending it out over the network for the client to
decrypt and vice versa. Can an azure VM that runs windows server 2016 encrypt network traffic?
The answer is definitely Yes, or microsoft would be going quickly out of business.
upvoted 3 times
BJoy

Ans:3 NO. "Windows Server 2012 R2 Core and Windows Server 2016 Core requires the bdehdcfg
component to be installed on the VM for encryption." https://docs.microsoft.com/en-
us/azure/virtual-machines/windows/disk-encryption-overview
upvoted 1 times
genti_81

Please read the article carefully. It is so annoying just to spit out the answer just because you
misinterpret some terms wrong. and also do listen to those that has more experience and share
facts not just what is in your mind. All of this are based on logic and facts. Do not just think.
Share it! It says clearly if Win 10 and Win server 2016 can be encrypted or not. Reading this
article https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-
firewall/require-encryption-when-accessing-sensitive-network-resources It says on very first row
that it neither of Win 10 and Win 2016 server have network package encrypted by default. I
don't assume that it is correct answer on Box 3 but I know that someone will explain it way
better than me. Don't be self-centered and stubborn. We all are here to learn. Share your
knowledge please.
upvoted 3 times
daekum
3 weeks, 3 days ago

on the same link, it also says "For devices that share sensitive information over the network,
Windows Defender Firewall with Advanced Security allows you to require that all such network
traffic be encrypted." <== it is stating you can configure "Windows Defender Firewall with
Advanced Security" to encrypt network traffic
upvoted 1 times
nerv

As you were quoting "it is not by default" but 3rd sentence isn't saying "win 16 WILL encrypt"
but rather "CAN encrypt" emphasising on possible capability of win 16 server to encrypt (some)
traffic to the internet. Even my win 10 workstation can encrypt all network traffic as it is doing
right now connected to VNP server and sending all traffic to the internet through it.
upvoted 1 times
SimonR2
1 month, 1 week ago

Exactly, it does it every time you connect to a https website too using TLS.
upvoted 1 times
ghassen007

no no yes, windows server 2016 can encrypt the network traffic https://docs.microsoft.com/en-
us/windows/security/threat-protection/windows-firewall/require-encryption-when-accessing-
sensitive-network-resources
upvoted 1 times
werbinich

@All: read the question carefully. It never says whether win16 can encrypt data or not; it's asking
whether win16 can encrypt network traffic or not Answer is NO. There is no out of box feature in
win16 to do so.
upvoted 1 times
SimonR2
1 month, 1 week ago

Incorrect, the answer is YES. Can you load https://google.com on your pc or win16 server? Then
congratulations, your workstation can do symmetric encryption!
upvoted 1 times
wruberte

Up vote here on the 3rd item being ridiculously incorrect. A Windows VM can be configured to
encrypt outbound data to internet. A simple example is TLS Communication with a URL
endpoint by an app hosted on a VM.
upvoted 6 times
SimonR2

Exactly, this is why some load balancers have SSL offload capabilities to take the strain of
encryption off the webservers.
upvoted 1 times
kolhoz

WS2016 CAN encrypt, right? Why the answer is no?
upvoted 2 times
type_12

given answers correct
upvoted 1 times
J0J0

Windows Server 2016 - It has TLS 1.2 enabled.
upvoted 1 times
Jk84

I agree that Q3 should be yes. The question reads "Can" so it can encrypt it. That doesn't mean it
will happen in reality should the host not support that level of encryption.
upvoted 2 times
HOTSPOT -
select No.
Hot Area:
Correct
Answer:
Box 1: Yes -
Azure Security Center is a unified infrastructure security management system that
strengthens the security posture of your data centers, and provides advanced threat
protection across your hybrid workloads in the cloud - whether they're in Azure or not -
as well as on premises.
Box 2: No -
Only two features: Continuous assessment and security recommendations, and Azure
secure score, are free.
Box 3: Yes -
The advanced monitoring capabilities in Security Center also let you track and manage
compliance and governance over time. The overall compliance provides you with a
measure of how much your subscriptions are compliant with policies associated with
your workload.
References:
https://docs.microsoft.com/en-us/azure/security-center/security-center-intro
adesh_13
5 days, 3 hours ago

Ah..Free Access gets Over Here..Thanks toh!
upvoted 1 times
TCF
6 days, 5 hours ago

Damn correct
upvoted 1 times
SachinKakkar
2 weeks, 2 days ago

correct
upvoted 1 times
Adefe
1 month, 1 week ago

Very correct
upvoted 1 times
puj

Correct
upvoted 1 times
You need to configure an Azure solution that meets the following requirements:
Secures websites from attacks -
✑ Generates reports that contain details of attempted attacks

What should you include in the solution?
• A. Azure Firewall
• B. a network security group (NSG)
• C. Azure Information Protection
• D. DDoS protection
Correct Answer: D
DDoS is a type of attack that tries to exhaust application resources. The goal is to affect
the application‫ג‬€™s availability and its ability to handle legitimate requests.
DDoS attacks can be targeted at any endpoint that is publicly reachable through the
internet.
Azure has two DDoS service offerings that provide protection from network attacks:
DDoS Protection Basic and DDoS Protection Standard.
DDoS Basic protection is integrated into the Azure platform by default and at no extra
cost.
You have the option of paying for DDoS Standard. It has several advantages over the
basic service, including logging, alerting, and telemetry. DDoS Standard can generate
reports that contain details of attempted attacks as required in this question.
References:
https://docs.microsoft.com/en-us/azure/security/fundamentals/ddos-best-practices
DenBorg

It seems odd that the question asks about attacks in general (of any type of attack), and the
correct answer is only for one specific type of attack.
upvoted 5 times
Chief

In future such questions have to specify the attacks. DDoS is the correct answer
upvoted 2 times
Dangotthejugo

Correct, most logical answer. The others can't protect from attacks, but filter and limit.
upvoted 3 times
werbinich
Correct. https://docs.microsoft.com/en-us/azure/ddos-protection/ddos-protection-overview
upvoted 1 times
HOTSPOT -
You plan to implement several security services for an Azure environment. You need to
identify which Azure services must be used to meet the following security requirements:
✑ Monitor threats by using sensors
✑ Enforce Azure Multi-Factor Authentication (MFA) based on a condition
Which Azure service should you identify for each requirement? To answer, select the
Hot Area:
Correct
Answer:
Box 1:
To monitor threats by using sensors, you would use Azure Advanced Threat Protection
(ATP).
Azure Advanced Threat Protection (ATP) is a cloud-based security solution that
leverages your on-premises Active Directory signals to identify, detect, and investigate
advanced threats, compromised identities, and malicious insider actions directed at your
organization.
Sensors are software packages you install on your servers to upload information to
Azure ATP.
Box 2:
To enforce MFA based on a condition, you would use Azure Active Directory Identity
Protection.
Azure AD Identity Protection helps you manage the roll-out of Azure Multi-Factor
Authentication (MFA) registration by configuring a Conditional Access policy to require
MFA registration no matter what modern authentication app you are signing in to.
References:
https://docs.microsoft.com/en-us/azure-advanced-threat-protection/what-is-atp
https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/howto-
identity-protection-configure-mfa-policy
success101

Both are correct. Sources: 1. https://docs.microsoft.com/en-us/azure-advanced-threat-
protection/atp-architecture 2. https://docs.microsoft.com/en-us/azure/active-directory/identity-
protection/overview-identity-protection
upvoted 24 times
Gerardo1971

Correct answer
upvoted 1 times
soumya_

what is the difference between security center and AATP? both says threat protection...
confused...
upvoted 1 times
Acredser

"Microsoft Defender for Identity (formerly Azure Advanced Threat Protection, also known as
Azure ATP) is a cloud-based security solution that leverages your on-premises Active Directory
signals to identify, detect, and investigate advanced threats, compromised identities, and
malicious insider actions directed at your organization." -- The questions does not mention
anything about "on-premise"?
upvoted 1 times
panal

correct
upvoted 1 times
mikl

Keywords are "Threat" and "MFA"
upvoted 3 times
Kiano
4 months ago
Isn´t it so that you enforce MFA through Conditional Access, which is under Azure Security
Center?
upvoted 3 times
eddiemy

Agree, threat look for threat only if have.
upvoted 1 times
Obeekay

Think of it from this angle: MFA means that a user's IDENTITY needs to be authenticated before
access is granted. So I think Azure AD Identity Protection is correct for the second question.
upvoted 2 times
brandotiago

This was on the exam 1) ATP 2) AD Identity Protection
upvoted 4 times
vmn52222

both are correct
upvoted 1 times
EdCab

Azure ATP monitors on premise Domain controllers, the Question only mentions azure therefore
I would select Security Center
upvoted 2 times
babufrik
9 months ago
I agree. 1) ATP 2) AD Identity Protection
upvoted 1 times
viv_g

Hi , could anyone please provide the correct answer?
upvoted 2 times
MoonManBlue

I believe the posted answer is correct; ATP, then AIP
upvoted 2 times
dradhzn

AIP? No , AD identityProtection ! = Azure Information Protection (AIP)
upvoted 2 times
tom931684
Shouldn't it be 1. ATP using sensors and 2. AD Identity Protection?
upvoted 1 times
theashu
1 year, 1 month ago

Both are come under :- Azure Active Directory Identity Protection
upvoted 2 times
over HTTP.
What are two possible solutions? Each correct answer presents a complete solution.
• A. Modify an Azure Traffic Manager profile

• B. Modify a network security group (NSG)
• C. Modify a DDoS protection plan
• D. Modify an Azure firewall
Correct Answer: B
of Azure resources.
In this question, we need to add a rule to the network security group to allow the
connection to the virtual machine on port 80 (HTTP).
Reference:
hgx32983

Question saying there should be 2 answer, not just one as given in the solution. Should be B
(NSG) and D (Firewall)
upvoted 99 times
CyberAmit

B+D are the correct answers
upvoted 21 times
merry_ace

B and D
upvoted 3 times
Franco11
1 week, 4 days ago

B & D Correct NSG And The Firewall
upvoted 1 times
Gerardo1971
2 weeks ago
B & D correct
upvoted 1 times
mikonnn
3 weeks ago
should be B and D
upvoted 1 times
abhi21
1 month ago
B+D is correct
upvoted 2 times
neoplasko
1 month ago
B+D are correct answers.
upvoted 2 times
Sreed1753
1 month, 1 week ago

should be B & D
upvoted 2 times
GinaDespojo
1 month, 1 week ago

Question asks for 2 possible solutions. Apart from B (NSG), D (Azure Firewall) is the other
possible solution.
upvoted 2 times
PhaniusRuin

Missed one answer - should be B & D
upvoted 1 times
Gurivi

B and D
upvoted 1 times
MoeBakry

B + D are the answers
upvoted 1 times
Nekerobert

The two (2) possible solutions in this scenario are: B. Modify a network security group (NSG) D.
Modify an Azure firewall
upvoted 2 times
Chris_Xiao

I think B+D are correct answers
upvoted 1 times
XmXprt
2 months ago
B & D are correct options
upvoted 1 times
Kishorepi
2 months ago
Need to select 2 answers. Both B & D are correct answers.
upvoted 1 times
HOTSPOT -
Hot Area:
Correct
Answer:
The just-in-time (JIT) virtual machine (VM) access feature in Azure Security Center
allows you to lock down inbound traffic to your Azure Virtual Machines. This reduces
exposure to attacks while providing easy access when you need to connect to a VM.
Reference:
https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-
time?tabs=jit-config-asc%2Cjit-request-asc
Chief
4 weeks, 1 day ago

Lock down inbound traffic to your Azure Virtual Machines with Azure Security Center's just-in-
time (JIT) virtual machine (VM) access feature. This reduces exposure to attacks while providing
easy access when you need to connect to a VM. For a full explanation about how JIT works and
the underlying logic, see Just-in-time explained. This page teaches you how to include JIT in
your security program. You'll learn how to: Enable JIT on your VMs - You can enable JIT with
your own custom options for one or more VMs using Security Center, PowerShell, or the REST
API. Alternatively, you can enable JIT with default, hard-coded parameters, from Azure virtual
machines. When enabled, JIT locks down inbound traffic to your Azure VMs by creating a rule in
your network security group.
upvoted 2 times
Tas006

Given answer is correct, question came out in the exam on the 5th of March 2021.
upvoted 2 times
Franco11
1 week, 4 days ago

Weird and when u learn AZ-900 on the site, nothing is mentioned about the JIT Feature
upvoted 3 times
sdas2021

This came in the test yesterday. Answer is Security Center
upvoted 1 times
Franco11
1 week, 4 days ago

Weird and when u learn AZ-900 on the site, nothing is mentioned about the JIT Feature
upvoted 2 times
onifemi
6 days, 9 hours ago

https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time?tabs=jit-
config-asc%2Cjit-request-asc
upvoted 1 times
hitova

Correct https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-
time?tabs=jit-config-asc%2Cjit-request-asc
upvoted 1 times
HOTSPOT -
select No.
Hot Area:
Correct
Answer:
Reference:
https://docs.microsoft.com/en-us/azure/virtual-network/network-security-group-how-it-
works
hercu

Box 2 is Correct! - No! All of you guys saying that a Network Security Group (NSG) can be
associated to a virtual network should be banned on taking this exam as you just misguide
others. Please make some research before you decide to leave some worthless comment. “You
can associate zero, or one, network security group to each virtual network subnet and network
interface in a virtual machine. The same network security group can be associated to as many
subnets and network interfaces as you choose.” References: https://docs.microsoft.com/en-
us/azure/virtual-network/network-security-group-how-it-works Note: It clearly says it must be
either a subnet (not a virtual network) or a NIC.
upvoted 41 times
TexTheDog
5 days, 7 hours ago

You're absolutely incorrect. it is YES YES YES NSG can be attached to virtual network.
https://docs.microsoft.com/en-us/azure/virtual-network/network-security-groups-overview
upvoted 1 times
ricerocket
2 weeks, 2 days ago

read here and answer from #140, nsg can be attached to virtual network.
https://docs.microsoft.com/en-us/azure/virtual-network/network-security-groups-overview
upvoted 3 times
freshmaker

should be all Yes. You can use an Azure network security group to filter network traffic to and
from Azure resources in an Azure virtual network. A network security group contains security
rules that allow or deny inbound network traffic to, or outbound network traffic from, several
types of Azure resources. For each rule, you can specify source and destination, port, and
protocol.
upvoted 11 times
pprajapa

I did a test. We dont associate NSG with Virtual network we have to associate it with either the
NIC or the subnet.
upvoted 1 times
daekum
1 month, 1 week ago

The answer is correct as per URL referencing 1) "each virtual network subnet" and 2) "network
interface" in a virtual machine. https://docs.microsoft.com/en-us/azure/virtual-network/network-
security-group-how-it-works
upvoted 1 times
Nitz2401

Please see the Note section on the link: https://docs.microsoft.com/en-us/azure/virtual-
network/network-security-group-how-it-works Network security groups are associated to
subnets or to virtual machines and cloud services deployed in the classic deployment model,
and to subnets or network interfaces in the Resource Manager deployment model
upvoted 2 times
gnuves

As per https://docs.microsoft.com/en-us/azure/virtual-network/network-security-group-how-it-
works, should be as shown in the answers. Can be attached to subnets and interfaces.
upvoted 1 times
SanjuCloudGuru

This answer explanation of Q 133 contradicts with #2 being No. Correct Answer: B A network
security group works like a firewall. You can attach a network security group to a virtual network
and/or individual subnets within the virtual network. You can also attach a network security
group to a network interface assigned to a virtual machine. You can use multiple network
security groups within a virtual network to restrict traffic between resources such as virtual
machines and subnets. You can filter network traffic to and from Azure resources in an Azure
virtual network with a network security group. A network security group contains security rules
that allow or deny inbound network traffic to, or outbound network traffic from, several types of
Azure resources. In this question, we need to add a rule to the network security group to allow
the connection to the virtual machine on port 80 (HTTP). Reference:
upvoted 2 times
werbinich

Answer is correct. "For inbound traffic, Azure processes the rules in a NSG associated to a subnet
first, if there is one, and then the rules in a NSG associated to the network interface. For
outbound traffic, Azure processes the rules in a NSG associated to a network interface first, if
there is one, and then the rules in a NSG associated to the subnet" it can't be binned with an
entire virtual network.
upvoted 2 times
SnakePlissken
2 months ago
Answer is Correct. a. Yes b. No c. Yes Explanation: Network security groups are assigned to a
network interface or a subnet. When you assign a network security group to a subnet, the rules
apply to all network interfaces in that subnet. You can restrict traffic further by associating a
network security group to the network interface of a VM. Source: https://docs.microsoft.com/en-
us/learn/modules/secure-and-isolate-with-nsg-and-service-endpoints/2-network-security-
groups
upvoted 6 times
SahanaL
2 months ago
correct ! NSG are internal to vnet and are applied at subnet level. No ?
upvoted 1 times
A_T
2 months ago
Answers are correct. Checked in link given with solution. "You can associate zero, or one,
network security group to each virtual network subnet and network interface in a virtual
machine. The same network security group can be associated to as many subnets and network
interfaces as you choose."
upvoted 2 times
rohit_rastogi01
2 months ago
should be All Yes
upvoted 1 times
ttn
2 months ago
You're are right. All should be Yes. You can attach a NSG to a virtual network and/or individual
subnets within the virtual network, or to a network interface assigned to a VM
upvoted 1 times
Returner
2 months ago
Should be ALL YES. You can deploy resources from several Azure services into an Azure virtual
network. For a complete list, see Services that can be deployed into a virtual network. You can
associate zero, or one, network security group to each virtual network subnet and network
interface in a virtual machine. The same network security group can be associated to as many
subnets and network interfaces as you choose.
upvoted 3 times
coolbreeze15
1 day, 16 hours ago

You just contradicted yourself. Read carefully what you posted " You can associate zero, or one,
network security group to each virtual network subnet and network interface in a virtual
machine." It basically says you can implement NSG inside a Virtual Network to Virtual Network
SUBNET and Network interface. Lastly "The same network security group can be associated to as
many SUBNETS and NETWORK INTERFACES as you choose."
upvoted 2 times
A_T
2 months ago
your explanation says it NSG can be associated with virtual network subnet and network
interface only. so why ALL YES??
upvoted 3 times
dotty88
2 months ago
All is YES
upvoted 4 times
You have an Azure environment that contains 10 virtual networks and 100 virtual
machines.
You need to limit the amount of inbound traffic to all the Azure virtual networks.
• A. one application security group (ASG)
• B. 10 virtual network gateways
• C. 10 Azure ExpressRoute circuits
• D. one Azure firewall
Correct Answer: D
You can restrict traffic to multiple virtual networks with a single Azure firewall.
You can centrally create, enforce, and log application and network connectivity policies
across subscriptions and virtual networks. Azure Firewall uses a static public IP address
for your virtual network resources allowing outside firewalls to identify traffic originating
from your virtual network.
References:
Ragijo

NSG just block or open a port, Azure Firewall can "limit the amount of traffic", because it's a
stateful firewall. So the answer is Azure Firewall (
upvoted 111 times
Examinicus

Both NSG and Firewall can perform this function. I believe the key is in the number of virtual
networks involved. You will use an NSG for a single VN and a Firewall for multiple.
upvoted 15 times
Kashan_Ali

Exactly, when I read that I need to protect them all then I have selected "Azure Firewall".
upvoted 1 times
1 year, 1 month ago

Yes! NSGs need to be created 10 times for all 10 VNets. Firewall can be applied to a resource
group, etc. etc. AT ONCE, selecting all of them together. Imagine you had 1,000 VNets as well !
upvoted 3 times
Jovial

Yes , and another thing is the cost . the cost of peering between 10 Vnet is going to be huge
compared to cost of Azure Firewall.
upvoted 1 times
Gerardo1971

Correct answer
upvoted 1 times
Kavitw
4 weeks ago
correct
upvoted 1 times
studyali114

aZURE fIREWALL
upvoted 1 times
kongf
2 months ago
Control inbound traffic in VM via == Firewall , while control Outgoing traffic in VM via =
Gateway
upvoted 2 times
sams
2 months ago
hi All, I had this for my exam last week fyi
upvoted 4 times
panal
3 months ago
Azure Firewall
upvoted 1 times
Sud10
5 months ago
A network security group enables you to filter network traffic to and from Azure resources
within an Azure virtual network. You can think of NSGs like an internal firewall.
https://docs.microsoft.com/en-us/learn/modules/secure-network-connectivity-azure/5-filter-
traffic-network-security-groups D should be the correct answer
upvoted 3 times
rickdme
5 months ago
Read carefully. It's the aggregate traffic.
upvoted 2 times
sreekarv

Azure firewall works before the request gets to the virtual network. NSGs allow you to filter
network traffic to and from Azure resources in an Azure virtual network.
upvoted 2 times
KateS

Agree. Azure firewall works for the virtual network. NSGs works for subnet and Network
interface in a Vnet.
upvoted 1 times
Alex_22

NSG is to allow or block traffic from a certain port.
upvoted 1 times
AhmedReda

NSG for sure check the faq. https://docs.microsoft.com/en-us/azure/firewall/firewall-faq Search
for : Network security groups provide distributed network layer traffic filtering to limit traffic to
resources within virtual networks
upvoted 1 times
toto74500

Limit "Amount" of inbound traffic in the question, not" limit traffic "
upvoted 1 times
KirruG
8 months ago
D is answer
upvoted 2 times
TSAHDEV
8 months ago
Correct Answer is NSG. Network security groups provide distributed network layer traffic
filtering to limit traffic to resources within virtual networks in each subscription. Azure Firewall is
a fully stateful, centralized network firewall as-a-service, which provides network- and
application-level protection across different subscriptions and virtual networks.
upvoted 1 times
theRunner

You said it yourself, Azure Firewall is the correct answer. The NSG allows traffic based on routing
rules, after the traffic has been allowed inside the Vnet. NSG is used to control traffic between
Azure resources. However, Azure Firewall is used to filter traffic at VNet level, because it is deny
all by default.
upvoted 2 times
vinhcmi

Correct answer is D because both Azure Firewall and NSG can limit inbound traffic, but one NSG
can not be enough for all 10 virtual networks.
upvoted 1 times
MK1368

Azure firewall
upvoted 1 times
Azure Key Vault is used to store secrets for Azure Active Directory (Azure AD) user
accounts.
• B. Azure Active Directory (Azure AD) administrative accounts
• C. Personally Identifiable Information (PII)
• D. server applications
Correct Answer: D
Centralizing storage of application secrets in Azure Key Vault allows you to control their
distribution. Key Vault greatly reduces the chances that secrets may be accidentally
leaked. When using Key Vault, application developers no longer need to store security
information in their application. Not having to store security information in applications
eliminates the need to make this information part of the code. For example, an
application may need to connect to a database. Instead of storing the connection string
in the app's code, you can store it securely in Key Vault.
References:
https://docs.microsoft.com/en-us/learn/modules/manage-secrets-with-azure-key-vault/
Moon

I would go with "D". Server Applications.
upvoted 71 times
SimonR2
1 month, 1 week ago

Agreed, you can store connection strings within azure vault rather than within the app itself. This
greatly improved security!
upvoted 1 times
shashu07
6 months ago
Answer A, as per attached Microsoft Article function that connects to an Azure Key Vault using
Azure Active Directory authentication, and then uses a secret stored in the vault to query a
remote service. // Create a Key Vault client with an Active Directory authentication callback var
keyVault = new KeyVaultClient(async (string authority, string resource, string scope) => { var
authContext = new AuthenticationContext(authority); var credential = new
ClientCredential(adClientId, adKey); var token = await authContext.AcquireTokenAsync(resource,
credential); return token.AccessToken; https://devblogs.microsoft.com/dotnet/storing-and-
using-secrets-in-azure/
upvoted 9 times
CaracasCCS

No! > The Secret you will always create it to give it to an Application that needs to use Azure
Authentication.. so the app will show the tocket to Azure and Azure will let it in.
upvoted 1 times
Tolulee
1 year ago
Azure Key Vault enables Microsoft Azure applications and users to store and use several types of
secret/key data: Both application and users. A is correct
upvoted 13 times
M_Abuzaid
1 week ago
i'm totally agree with you, it's for any types of secret/key data
upvoted 1 times
ConaxLearn
9 months ago
Users <> User Accounts.
upvoted 3 times
cetag37681

D - Should be the answer. Why would Vault be used to store (Azure AD) user accounts but not
(Azure AD) admin accounts? makes no sense.
upvoted 14 times
dv1

Cause there is no AAD "administrator account". Only AAD user (aka member) account with
administrative roles (e.g. global administrator)
upvoted 4 times
Gerardo1971

Correct answer
upvoted 1 times
az900cu
1 month, 1 week ago

Centralize application secrets Centralizing storage of application secrets in Azure Key Vault
allows you to control their distribution. Key Vault greatly reduces the chances that secrets may
be accidentally leaked.
upvoted 1 times
EricMok
1 month, 1 week ago

Is the question not complete? How to determine the answer? What is underlined text?
upvoted 6 times
ShawnKW

The answer provided is Correct. (D) https://docs.microsoft.com/en-us/learn/modules/manage-
secrets-with-azure-key-vault/2-what-is-key-vault Just open the link and read the *Important
section. Important Key Vault is designed to store configuration secrets for server apps. It's not
intended for storing data belonging to your app's users, and it shouldn't be used in the client-
side part of an app. This is reflected in its performance characteristics, API, and cost model. User
data should be stored elsewhere, such as in an Azure SQL database with Transparent Data
Encryption, or a storage account with Storage Service Encryption. Secrets used by your app to
access those data stores can be kept in Key Vault.
upvoted 8 times
Cooz

It surely is A: Key Vault. If you read the explanation, then you'll notice that it is about Key Vault,
not server applications. The person at ExamTopics responsible for the AZ-900 department
provided the correct explanation but accidentally checked D instead of A.
upvoted 1 times
Diago

Key Vault is designed to store configuration secrets for server apps.
upvoted 3 times
BCITbatman
2 months ago
I can't even see the underlined text. Is it just me? The question appears incomplete for some
reason. Tried 3 different browsers on pc and iphone.
upvoted 1 times
MukeshJ
2 months ago
Atleast underline the text that needs to be evaluated.
upvoted 2 times
Billybob0604
It is D. Obviously you can stored secrets for Azure Active Directory (Azure AD) user accounts.
However the point is that this is only 1 way of storing secrets. Key Vault is essentially meant to
prevent embedding non encrypted secrets in applications. These non encrypted secrets can be
connection strings to database, credentials etc. Thats why secrets for server applications covers
it.
upvoted 1 times
TakumaK

so is the underlined text "Azure Active Directory (Azure AD)"? Then D can be the answer as the
explanation talks about the benefit of the Key Value. I don't understand why some people just
say the answer without proper explain? just copy the other answers?
upvoted 1 times
panal

Go with D.
upvoted 1 times
baz

D: Server Applications https://docs.microsoft.com/en-us/learn/modules/manage-secrets-with-
azure-key-vault/2-what-is-key-vault
upvoted 2 times
rocaj

can't be A, as the user would login entering the credentials directly. It is only applicable to
applications , so the right answers is D.
upvoted 1 times
Billybob0604

Guys, it's D. Maybe you know Keepass. This is also a key vault. The answer is in the last sentence
: "an application may need to connect to a database. Instead of storing the connection string in
the app's code, you can store it securely in Key Vault." Not only user credentials, also database
credentials (connection strings) can be stored encrypted in Key Vault. A good programmer only
refers to encrypted passwords in his applications, not the original password.
upvoted 4 times
Massy

so it's A not D
upvoted 2 times
polangus

I think the D is right
upvoted 2 times
Your company plans to automate the deployment of servers to Azure.
Your manager is concerned that you may expose administrative credentials during the
deployment.
You need to recommend an Azure solution that encrypts the administrative credentials
during the deployment.
• A. Azure Key Vault

• B. Azure Information Protection
• C. Azure Security Center
• D. Azure Multi-Factor Authentication (MFA)
Correct Answer: A
Azure Key Vault is a secure store for storage various types of sensitive information. In
this question, we would store the administrative credentials in the Key Vault.
With this solution, there is no need to store the administrative credentials as plain text in
the deployment scripts.
All information stored in the Key Vault is encrypted.
Azure Key Vault can be used to Securely store and tightly control access to tokens,
passwords, certificates, API keys, and other secrets.
Secrets and keys are safeguarded by Azure, using industry-standard algorithms, key
lengths, and hardware security modules (HSMs). The HSMs used are
Federal Information Processing Standards (FIPS) 140-2 Level 2 validated.
Access to a key vault requires proper authentication and authorization before a caller
(user or application) can get access. Authentication establishes the identity of the caller,
while authorization determines the operations that they are allowed to perform.
References:
RSMCT2011

A Use Azure Key Vault to encrypt keys and small secrets like passwords that use keys stored in
hardware security modules (HSMs). https://azure.microsoft.com/en-us/services/key-vault/
upvoted 29 times
foreverlearner

Question is about protecting credential during an automated deployment (e.g. not typing
password in clear text in a JSON template or PS script), not protecting information inside
documents (or logins). Azure Key Vault is the only correct answer for this scenario
upvoted 19 times
Lipseal

I got this in my exam (May 2021)
upvoted 1 times
Gerardo1971
2 weeks ago
Correct answer
upvoted 1 times
mikl

A is correct. https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/key-
vault-parameter?tabs=azure-cli
upvoted 2 times
MimeTalk
5 months ago
"Azure Resource Manager can securely deploy certificates stored in Azure Key Vault to Azure
VMs when the VMs are deployed." https://docs.microsoft.com/en-
us/azure/security/fundamentals/data-encryption-best-practices So answer is Azure Key Vault
upvoted 3 times
sunwukong

Azure Key Valut
upvoted 1 times
Ebenezer

Azure Key Vault is a cloud service that provides a secure store for secrets. You can securely store
keys, passwords, certificates, and other secrets. The answer is definitely Azure Key Vault.
upvoted 3 times
bb2020

MFA does not help with providing any help with exposing the password but provides added
layer of security. Hence Key Vault is the right answer
upvoted 1 times
MK1368

Azure key vault
upvoted 1 times
svm_Terran

A. Azure keyvault is used to protect critical data such as to encrypt.
upvoted 1 times
Orient3950
Comment section is confusing
upvoted 1 times
VTHAR

Yes, but no worries. Answer is Azure Keyvault. It's in exam today 29 Aug.
upvoted 6 times
babuvt

A.. It is very clear.. Azure Key Vault
upvoted 1 times
Don123

https://azure.microsoft.com/en-us/services/information-protection/
upvoted 1 times
Piratedking

Answer: A. Question asked about "encrypts the administrative credentials". Key Vault is used to
store the encryption key.
upvoted 2 times
SagarShete
1 year ago
Azure Key vault is the only correct answer.
upvoted 6 times
al7869211
1 year, 1 month ago

expose administrative credentials = MFA (I think)
upvoted 1 times
magistrum
1 year, 1 month ago

MFA is not used in this way
upvoted 10 times
You need to control the ports that devices on the Internet can use to access the virtual
machines.
• A. a network security group (NSG)

• B. an Azure Active Directory (Azure AD) role
• C. an Azure Active Directory group
• D. an Azure key vault
Correct Answer: A
of Azure resources.
References:
Sandy4912

A network security group (NSG) contains a list of security rules that allow or deny network traffic
to resources connected to Azure Virtual Networks (VNet). NSGs can be associated to subnets,
individual VMs (classic), or individual network interfaces (NIC) attached to VMs (Resource
Manager) A is the correct answer.
upvoted 14 times
vaisat

A is the only logic option.
upvoted 9 times
mytapun

correct
upvoted 1 times
samuelgarcia

Why does this answer say you can attach an NSG to a virtual network but in question #133 it
says you can't?
upvoted 1 times
Gerardo1971
2 weeks ago
Correct answer
upvoted 1 times
jashish79

Azure Firewall is for filtering traffic from outside Azure world , that is , internet . NSG is for
filtering traffic from within Azure resources ...Option of Azure Firewall is not present
upvoted 1 times
panal

upvoted 1 times
etoto

A network security group (NSG) enables you to filter network traffic to and from Azure resources
within an Azure Virtual Network. You can think of network security groups like an internal
firewall. An NSG can contain multiple inbound and outbound security rules that enable you to
filter traffic to and from resources by source and destination IP address, port, and protocol.
upvoted 4 times
Prates_BR

Yes, the logical option, however when we are talking about internet, most of times FIREWALL
should be the correct option.
upvoted 1 times
winston_45

It should be firewall...
upvoted 2 times
ADJ85

A is the correct answer.
upvoted 1 times
Kavitakrish

Same question appeared! Many questions from this set came for exam ., really useful material
upvoted 2 times
rahul0220

A is right
upvoted 1 times
Nabeels

NSG is correct and Key word is Port
upvoted 1 times
MK1368

NSG is correct
upvoted 1 times
sharangopi
9 months ago
Key word : ports So answer should be NSG
upvoted 2 times
Deepthi106

Correct!
upvoted 1 times
babuvt

It should be either Azure Firewall or NSG. Option A is correct since NSG is mentioned
upvoted 2 times
HOTSPOT -
Hot Area:
Correct
Answer:
When you create a virtual machine, the default setting is to create a Network Security
Group attached to the network interface assigned to a virtual machine.
of Azure resources.
connection to the virtual machine on port 8080.
Reference:
Kavitw
4 weeks ago
port=NSG
upvoted 2 times
Dangotthejugo

At first I thought it was B, but A seems logical.
upvoted 1 times
UmeshBarailli
2 months ago
Correct
upvoted 1 times
Peace2_

Correct
upvoted 1 times
panal

Correct
upvoted 2 times
HOTSPOT -
select No.
Hot Area:
Correct
Answer:
Reference:
https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#owner
Canary_2021

Agree! The answer should be Yes, Yes, Yes.
upvoted 1 times
pprajapa

Strange last option should be yes i was able to test it and assign owner role to multiple users.
upvoted 2 times
Citrix12345
1 week ago
I test this in my lab and assign the owner role of a resource group to multiple users!
upvoted 4 times
AwesomeSlide
1 week, 1 day ago

Owner role can be assigned to multiple users for a resource group. I tried and learnt.
upvoted 3 times
over HTTP.
Solution: You modify a network security group (NSG).
• A. Yes
• B. No
Correct Answer: A
of Azure resources.
connection to the virtual machine on port 80 (HTTP).
References:
rdy2go

Shouldn't this be "No", you need to make sure there is a public IP first.
upvoted 8 times
sinear

We can assume IP address is already granted here. This is "fundamentals", remember ;) ? The
question is meant to test we correctly understand what a NSG can do or not. And it can what is
stated in the question
upvoted 6 times
RGP4d33
4 weeks, 1 day ago

But nowhere says there is a public IP ... what if is being accessed only though Bastion? We
coudn't predict there is a public IP, so answer shall be NO.
upvoted 1 times
Pinscher

Only adding the rule is not enough. How is someone supposed to reach it from the internet? No
IP, routing or such to direct any request to the VM.
upvoted 5 times
Franco11
Not Enough, U need to make sure there are an allow rule on the FIREWALL
upvoted 1 times
Gerardo1971
2 weeks ago
Correct answer
upvoted 1 times
TecKen313
3 weeks, 3 days ago

The answer is correct. https://docs.microsoft.com/en-us/learn/modules/secure-and-isolate-with-
nsg-and-service-endpoints/3-exercise-network-security-groups
upvoted 2 times
Kavitw
4 weeks ago
correct
upvoted 1 times
GuyJosenhans
1 month ago
You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP.
Ensure is the Key Word! You should have to modify anything. May things can block this not just
a NSG. A Firewall could block this as well! the answer should be NO!
upvoted 1 times
CARIOCA
1 month, 1 week ago

justified it?
upvoted 1 times
hercu
A Network Security Group (NSG) is sufficient to allow the connection to the virtual machine on
port 80 (HTTP) from the Internet. Public IP is part of network configuration. We should mainly
focus on the functionality of the Network security groups. For sure, you can allow the
connection to the VM through port 80 using NSG. Tutorial from Microsoft that demonstrates the
same case (with public IP) and NSG used (no firewall!): https://docs.microsoft.com/en-
us/azure/virtual-network/tutorial-filter-network-traffic
upvoted 4 times
RGP4d33
4 weeks, 1 day ago

But you're assuming (incorrectly) there is a public IP: and there could not... so, answer must be
NO (because is an incomplete solution)
upvoted 1 times
TecKen313
3 weeks, 3 days ago

You are wrong. The answer IS CORRECT https://docs.microsoft.com/en-
us/learn/modules/secure-and-isolate-with-nsg-and-service-endpoints/3-exercise-network-
security-groups
upvoted 1 times
hercu

In addition, note: "Some question sets might have more than one correct solution" which means
that the answer available here can be part of the correct solution. To conclude, to modify NSG is
surely the required task to meet the expected solution.
upvoted 2 times
jashish79

Answer should be "No". NSG is only for internal network. Azure Firewall is for outside
world(internet)
upvoted 3 times
RGP4d33
4 weeks, 1 day ago
NSG could filter both outside and inside. Question here is if the Virtual Machine has a public IP.
Because it could not have any (public IP), allowing it through an NSG isn't eough, so answer
(correct indeed) is NO.
upvoted 1 times
panal

Correct
upvoted 1 times
over HTTP.
Solution: You modify a DDoS protection plan.
• A. Yes
• B. No
Correct Answer: B
DDoS is a form of attack on a network resource. A DDoS protection plan is used to
protect against DDoS attacks; it does not provide connectivity to a virtual machine.
To ensure that a virtual machine named VM1 is accessible from the Internet over HTTP,
you need to modify a network security group or Azure Firewall.
References:
https://docs.microsoft.com/en-us/azure/virtual-network/ddos-protection-overview
chris_py_chris

Create new NSG --> add inbound security rule & allow HTTP --> assiciate with appropriate
subnet
upvoted 36 times
friendly4ever

firewall should be configured not DDOS
upvoted 6 times
Gerardo1971

Correct answer
upvoted 1 times
yungenma
3 weeks, 5 days ago

Correct!
upvoted 1 times
Bhupiz
2 months ago
Correct
upvoted 1 times
rob_724
2 months ago
well, this should be fairly obvious
upvoted 1 times
panal

Correct.
upvoted 1 times
rishikantsingh160581

Solution should be NSG
upvoted 1 times
nigeldmgriffith
4 months ago
B; the firewall needs to be configured to accomplish the desired result.
upvoted 1 times
male

DDOS will provide security from attacks
upvoted 1 times
Divya07

YOu need to assign a public IP if you need access from internet. For security you will configure
access via Firewall/ load balancer
upvoted 1 times
QualifiedExpert

Modify the NSG first.
upvoted 1 times
sunisury

create network security group, associate with VM NIC or subnet for it to be accessible over
HTTP...https://docs.microsoft.com/en-us/azure/virtual-machines/windows/nsg-quickstart-portal
upvoted 1 times
Ebenezer

A firewall needs to be configured.
upvoted 1 times
kkomoye
there is no ddos protection plan
upvoted 2 times
leomaurodesenv

I think, you must to configure a Network Security Group for HTTP ports.
upvoted 1 times
Satishraju
10 months ago
B because accesing means allowing to use the app so a Firewall must be enabled first. DDoS os
the next phase to defend http attacks from hackers in blockjng tons of unauthorized requests to
slow down or pause the app
upvoted 1 times
You need to collect and automatically analyze security events from Azure Active
Directory (Azure AD).
• A. Azure Sentinel
• B. Azure Synapse Analytics
• C. Azure AD Connect
• D. Azure Key Vault
Correct Answer: A
Reference:
https://docs.microsoft.com/en-us/azure/sentinel/overview
Judah

The answer is right I think
upvoted 1 times
rickysanyal
1 week, 6 days ago

yes correct answer
upvoted 2 times
tvl
2 weeks, 1 day ago

correct
upvoted 1 times
You need to ensure that when Azure Active Directory (Azure AD) users connect to
Azure AD from the Internet by using an anonymous IP address, the users are prompted
automatically to change their password.
Which Azure service should you use?
• A. Azure AD Connect Health

• B. Azure AD Privileged Identity Management
• C. Azure Advanced Threat Protection (ATP)
• D. Azure AD Identity Protection
Correct Answer: D
Azure AD Identity Protection includes two risk policies: sign-in risk policy and user risk
policy. A sign-in risk represents the probability that a given authentication request
isn‫ג‬€™t authorized by the identity owner.
There are several types of risk detection. One of them is Anonymous IP Address. This
risk detection type indicates sign-ins from an anonymous IP address (for example, Tor
browser or anonymous VPN). These IP addresses are typically used by actors who
want to hide their login telemetry (IP address, location, device, etc.) for potentially
malicious intent.
You can configure the sign-in risk policy to require that users change their password.
References:
https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/howto-sign-in-
risk-policy https://docs.microsoft.com/en-us/azure/active-directory/identity-
protection/concept-identity-protection-risks
Naghea

I passed!
upvoted 30 times
Krupa007
I dont hav complete qn's from this link..can u help me by sending complete qn's if u hav or any
other pdf..it will be helpful for me.. Hoping for the positive reply :) thanks in advance
upvoted 1 times
SoniaA

D > Azure AD Identity Protection "Identity Protection is a tool that allows organizations to
accomplish three key tasks: Automate the detection and remediation of identity-based risks.
Investigate risks using data in the portal. Export risk detection data to third-party utilities for
further analysis."
upvoted 18 times
Gerardo1971

Correct answer
upvoted 1 times
SilkyS19
2 weeks, 1 day ago

D is correct. Identity protection detect potential vulnerabilities affecting your organization's
identities, configure policies to respond to suspicious actions, and then take appropriate action
to resolve them.
upvoted 1 times
sumitraj04

Correct
upvoted 1 times
whatsinausername
2 months ago
D is correct
upvoted 1 times
Sandeeptp
2 months ago
D is right
upvoted 1 times
jd2

There's something called conditional access, it's new and we might see it in newer exam versions
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview
upvoted 1 times
panal

Corret
upvoted 1 times
H1205

Answer is Privileged Identity Management (PIM), as it can restrict/control access to threats but
Identity Protection informs incase of any issues
upvoted 1 times
Franco11

This Should be conditional authentication ? anyone ?
upvoted 1 times
Ritz40

D is the right answer.
upvoted 2 times
gmadarik7345

D is correct
upvoted 1 times
Ebenezer

The answer is very correct.
upvoted 1 times
Lak43

D is correct , i got this in my exam
upvoted 3 times
Stuudent

Did you get an overview showing which answers were correct and which not?
upvoted 2 times
dkezi

how many questions from this dump, i have mine in 3 hours
upvoted 1 times
Kavitakrish

Azure identity protection is only fr premium users so right answer is B
upvoted 1 times
MK1368

D is correct
upvoted 1 times
DRAG DROP -
Match the term to the correct definition.
Instructions: To answer, drag the appropriate term from the column on the left to its
description on the right. Each term may be used once, more than once, or not at all.
Select and Place:
Correct
Answer:
Box 1: ISO -
ISO is the International Organization for Standardization. Companies can be certified to
ISO standards, for example ISO 9001 or 27001 are commonly used in IT companies.
Box 2: NIST -
The National Institute of Standards and Technology (NIST) is a physical sciences
laboratory, and a non-regulatory agency of the United States Department of
Commerce.
Box 3: GDPR -
GDPR is the General Data Protection Regulations. This standard was adopted across
Europe in May 2018 and replaces the now deprecated Data Protection
Directive.
The General Data Protection Regulation (EU) (GDPR) is a regulation in EU law on data
protection and privacy in the European Union (EU) and the European
Economic Area (EEA). It also addresses the transfer of personal data outside the EU
and EEA areas. The GDPR aims primarily to give control to individuals over their
personal data and to simplify the regulatory environment for international business by
unifying the regulation within the EU.
Box 4: Azure Government -

US government agencies or their partners interested in cloud services that meet
government security and compliance requirements, can be confident that
Microsoft Azure Government provides world-class security, protection, and compliance
services. Azure Government delivers a dedicated cloud enabling government agencies
and their partners to transform mission-critical workloads to the cloud. Azure
Government services handle data that is subject to certain government regulations and
requirements, such as FedRAMP, NIST 800.171 (DIB), ITAR, IRS 1075, DoD L4, and
CJIS. In order to provide you with the highest level of security and compliance, Azure
Government uses physically isolated datacenters and networks (located in U.S. only).
References:
https://en.wikipedia.org/wiki/National_Institute_of_Standards_and_Technology
https://en.wikipedia.org/wiki/General_Data_Protection_Regulation
https://docs.microsoft.com/en-us/azure/azure-government/documentation-government-
welcome
Judah

That's right.
upvoted 2 times
Sangmeshwar
2 weeks, 1 day ago

Correct
upvoted 1 times
panal

correct
upvoted 1 times
To what should an application connect to retrieve security tokens?
• A. an Azure Storage account
• B. Azure Active Directory (Azure AD)
• C. a certificate store
• D. an Azure key vault
Correct Answer: B
Azure AD authenticates users and provides access tokens. An access token is a
security token that is issued by an authorization server. It contains information about the
user and the app for which the token is intended, which can be used to access Web
APIs and other protected resources.
Instead of creating apps that each maintain their own username and password
information, which incurs a high administrative burden when you need to add or remove
users across multiple apps, apps can delegate that responsibility to a centralized
identity provider.
Azure Active Directory (Azure AD) is a centralized identity provider in the cloud.
Delegating authentication and authorization to it enables scenarios such as
Conditional Access policies that require a user to be in a specific location, the use of
multi-factor authentication, as well as enabling a user to sign in once and then be
automatically signed in to all of the web apps that share the same centralized directory.
This capability is referred to as Single Sign On (SSO).
References:
https://docs.microsoft.com/en-us/azure/active-directory/develop/authentication-
scenarios
vanr2000

It should be D, instead of B. Azure key vault keep Security Tokens
https://docs.microsoft.com/en-us/azure/key-vault/key-vault-whatis
upvoted 114 times
TexTheDog
4 days, 7 hours ago

IT IS B: The link below states that tokens comes from Azure AD https://docs.microsoft.com/en-
us/azure/storage/common/storage-auth-aad-app?tabs=dotnet
upvoted 2 times
JasonB

Not Agree The Azure Key Vault store Keys. Azure AD give acces tokens.
upvoted 120 times
Berg

KeyVault can also store tokens. "Azure Key Vault can be used to Securely store and tightly
control access to tokens, passwords, certificates, API keys, and other secrets"
upvoted 16 times
Stuudent

You may store the token in a vault but I don't think apps will be able to connect to it to retrieve
the token in order to access anything. For that you need an OpenID Connect flow (for example)
which involves AD: https://docs.microsoft.com/en-us/azure/active-directory/develop/security-
tokens and then: https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-
protocols-oidc
upvoted 5 times
dani6666

AKV store ACCESS TO tokens (so the keys), not tokens itself
upvoted 10 times
shashu07
6 months ago
Question is about accessing / retrieving security tokens token from Application & not storing
the same. Microsoft identity platform authenticates users and provides security tokens, such as
access token, refresh token, and ID token, that allow a client application to access protected
resources on a resource server. https://docs.microsoft.com/en-us/azure/active-
directory/develop/security-tokens
upvoted 8 times
exam_taker5

agreed
upvoted 8 times
RTT1976

The answer B is correct, because it asks what "an application should connect to". An Application
cannot connect to a Key Vault.
upvoted 42 times
richardsonbq

Actually, the Key Vault can be accessed by an Application to retrieve secure information. So I'm
not sure if AD is the only right answer here...
upvoted 7 times
vsivas

https://docs.microsoft.com/bs-latn-ba/azure/active-directory-b2c/active-directory-b2c-apps AD
is correct
upvoted 1 times
richardsonbq

But in the context of the answer, I believe AD is more appropriate as per
scenarios#security-tokens
upvoted 5 times
Arqueiro

To what should an application connect to retrieve security tokens ... this is an ambiguous
question in my opinion. Application -> connect -> to retrieve ... this does not sound to me like
an authentication (login/AD) process. Anyway if you think about being authenticated, then it's
the AD, but Key Vault can provide security tokens if you are beyond that point.
upvoted 1 times
Gerardo1971
2 weeks ago
Correct answer
upvoted 1 times
SilkyS19
2 weeks, 1 day ago

Correct answer is AD. https://docs.microsoft.com/en-us/azure/active-
directory/develop/authentication-vs-authorization
upvoted 1 times
km_cloud

it is AAD, correct answer https://docs.microsoft.com/en-us/azure/storage/common/storage-
auth-aad-app?tabs=dotnet
upvoted 1 times
Drouck

retrieve is the key word , so for me, key vault make sense
upvoted 1 times
panal

Correct
upvoted 1 times
mikl

https://docs.microsoft.com/en-us/azure/active-directory/develop/security-tokens Pretty sure its
Azure AD - so B seems right.
upvoted 1 times
AbhiYad
4 months ago
Security Tokens are like OTP or equivalent shortlife codes used for authentication.
upvoted 1 times
bratpyt

This question is stupid. It should be specified whether you are getting this token by
authenticating or you are already authenticated and you've got this token long time ago and
you need a secure place to store it. So I have no idea whether is should be B or D, this question
is unambiguous
upvoted 4 times
bratpyt

ambiguous*
upvoted 1 times
whoru

Access tokens are an Active Directory mechanism and have been for over 20 years. An AD token
states what types of access permissions a user or service has. The Key Vault stores public/private
key pair information and other passwords.
upvoted 3 times
kenedruc

It's noteworthy that the functionality of the Azure AD begins and ends in the IAM blade of the
Key Vault. This is where apps and services connect to authenticate and receive the needed
authorization to access the storage secrets and keys. Hence, Azure AD (B) is the correct answer.
upvoted 1 times
kenedruc

It's noteworthy that the functionality of the Azure AD begins and ends in the IAM blade of the
Key Vault. This is where apps and services connect to authenticate and receive the needed
authorization to access the storage secrets and keys.
upvoted 1 times
LeSharo

Answer B "Azure AD returns the access token to the application, and the application can then
use the access token to authorize requests to Azure Blob storage or Queue storage."
https://docs.microsoft.com/en-us/azure/storage/common/storage-auth-aad-app?tabs=dotnet
upvoted 1 times
Arash123

I would say B. Because you can deploy Apps and authentication which relies on token will work
for them without configuring any Key Vault.
upvoted 1 times
absshm

AAD is required to access it. Key Vault is to store your secrets!
upvoted 1 times
Your network contains an Active Directory forest. The forest contains 5,000 user
accounts.
Your company plans to migrate all network resources to Azure and to decommission the
on-premises data center.
You need to recommend a solution to minimize the impact on users after the planned
migration.
• A. Implement Azure Multi-Factor Authentication (MFA)

• B. Sync all the Active Directory user accounts to Azure Active Directory (Azure AD)
• C. Instruct all users to change their password
• D. Create a guest user account in Azure Active Directory (Azure AD) for each user
Correct Answer: B
To migrate to Azure and decommission the on-premises data center, you would need to
create the 5,000 user accounts in Azure Active Directory. The easy way to do this is to
sync all the Active Directory user accounts to Azure Active Directory (Azure AD). You
can even sync their passwords to further minimize the impact on users.
The tool you would use to sync the accounts is Azure AD Connect. The Azure Active
Directory Connect synchronization services (Azure AD Connect sync) is a main
component of Azure AD Connect. It takes care of all the operations that are related to
synchronize identity data between your on-premises environment and
Azure AD.
References:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-
whatis
Ragijo

MFA is to use your phone or a secondary phase of authentication. You need to move users to
Azure not reset their passwords, so Instruct all users to change their password is invalid. Create a
guest user account in Azure Active Directory (Azure AD) for each user, if you do that, is like
creating a new user to the existing user, so the identities will be different. The answer is B. Sync
all the Active Directory user accounts to Azure Active Directory (Azure AD) using AAD Connect
or importing the users from AD DS.
upvoted 65 times
shashu07
6 months ago
Excellent Explaination
upvoted 1 times
axman832005

this was on the test
upvoted 29 times
1 year, 1 month ago

thank you.
upvoted 1 times
Gerardo1971

Correct answer
upvoted 1 times
nickname_200

I got it on the exam
upvoted 2 times
panal

Correct
upvoted 1 times
Joe75
3 months ago
If there was a choice of "AAD DS", that would be better.
upvoted 1 times
Beros

The Azure Active Directory Connect synchronization services (Azure AD Connect sync) is a main
synchronize identity data between your on-premises environment and Azure AD.
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-whatis
upvoted 1 times
bifeye8205

Its synch using Azure AD connect
upvoted 1 times

B. Sync all the Active Directory user accounts to Azure Active Directory (Azure AD)
upvoted 1 times
[Removed]

I've just done the exam and passed with 840!!! Most of the questions are from here!!!
upvoted 3 times
Krishna_Agrawal
6 months ago
Yes correct
upvoted 1 times
Ebenezer

This answer is right!!!
upvoted 1 times
vmn52222

B is correct
upvoted 1 times
vmn52222

correct answare
upvoted 1 times
Mister_N

To migrate to Azure and decommission the on-premises data center, you would need to create
the 5,000 user accounts in Azure Active Directory. The easy way to do this is to sync all the
Active Directory user accounts to Azure Active Directory (Azure AD). You can even sync their
passwords to further minimize the impact on users. The tool you would use to sync the accounts
is Azure AD Connect. The Azure Active Directory Connect synchronization services (Azure AD
Connect sync) is a main component of Azure AD Connect. It takes care of all the operations that
are related to synchronize identity data between your on-premises environment and Azure AD.
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-whatis
upvoted 5 times
MK1368

B is correct
upvoted 1 times
mic_azure54

hi can you please share your email id.
upvoted 1 times
Karan123

Why discuss on correct answer guys. It's frustrating
upvoted 3 times
VTHAR

Good to know if it's on the test recently but repeating the correct answer and saying it's correct
is frustrating. :D
upvoted 1 times
HOTSPOT -
select No.
Hot Area:
Correct
Answer:
Box 1: Yes -
You can send Azure AD activity logs to Azure Monitor logs to enable rich visualizations,
monitoring and alerting on the connected data.
All data collected by Azure Monitor fits into one of two fundamental types, metrics and
logs (including Azure AD activity logs). Activity logs record when resources are created
or modified. Metrics tell you how the resource is performing and the resources that it's
consuming.
Box 2: Yes -
Azure Monitor can consolidate log entries from multiple Azure resources, subscriptions,
and tenants into one location for analysis together.
Box 3: Yes -
You can create alerts in Azure Monitor.
Alerts in Azure Monitor proactively notify you of critical conditions and potentially
attempt to take corrective action. Alert rules based on metrics provide near real time
alerting based on numeric values, while rules based on logs allow for complex logic
across data from multiple sources.
References:
https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/concept-
activity-logs-azure-monitor https://docs.microsoft.com/en-us/azure/azure-
monitor/overview
Gerardo1971
2 weeks ago
Correct answer
upvoted 1 times
hercu
2 months ago
Box 1 & 3 - Correct! Box 2 is also Correct - Yes! "A single Log Analytics workspace can monitor
resources in all of your subscriptions as long as they are under the same Tenant." Reference:
https://techcommunity.microsoft.com/t5/azure-monitor/log-analytics-workspace-with-multiple-
subscription/m-p/324805
upvoted 2 times
Veronika1989

Correct! I have re-checked 2nd question from the portal and it is possible to monitor 2 subs at
the same time.
upvoted 4 times
Sandy14nove

The second should be NO Azure Monitor can be configured to monitor any Resource with any
Conditions that you want, but when you save the monitor alert rule it is saved as an object in the
same subscription that is selected when you choose the resource that you are monitoring.
upvoted 1 times
breton

The second should be No
upvoted 1 times
panal

Correct
upvoted 1 times
hf443
3 months ago
I think second question should be No. https://techcommunity.microsoft.com/t5/azure-
monitor/azure-monitor-multiple-subscriptions/m-p/1348362
upvoted 2 times
Shivaram_i
3 months ago
I think Answer is correct. https://docs.microsoft.com/en-us/azure/azure-monitor/log-
query/cross-workspace-query
upvoted 3 times
hf443
3 months ago
Having doubts now. According to https://docs.microsoft.com/en-us/azure/azure-
monitor/platform/resource-logs. "Consolidate log entries from multiple Azure resources,
subscriptions, and tenants into one location for analysis together."
upvoted 2 times
TakumaK

Thanks for the link to figure out the answer. Azure Monitor Logs is a feature of Azure Monitor.
And Azure Monitor Logs consolidate log entries from multiple Azure resources, subscriptions,
and tenants into one location for analysis together. This might lead the answer is Yes.
upvoted 4 times
HOTSPOT -
You create a resource group named RG1 in Azure Resource Manager.
You need to prevent the accidental deletion of the resources in RG1.
Which setting should you use? To answer, select the appropriate setting in the answer
area.
Hot Area:
Correct
Answer:
You can configure a lock on a resource group to prevent the accidental deletion.
As an administrator, you may need to lock a subscription, resource group, or resource
to prevent other users in your organization from accidentally deleting or modifying
critical resources. You can set the lock level to CanNotDelete or ReadOnly. In the
portal, the locks are called Delete and Read-only respectively.
CanNotDelete means authorized users can still read and modify a resource, but they
can't delete the resource.
✑ ReadOnly means authorized users can read a resource, but they can't delete or
update the resource. Applying this lock is similar to restricting all authorized users to the
permissions granted by the Reader role.
Reference:
https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-lock-
resources
freshmaker
1 month, 1 week ago

got this q
upvoted 1 times
Jude_Mac
2 months ago
correct
upvoted 1 times
bcih
2 months ago
correct
upvoted 1 times
panal

Correct
upvoted 2 times
smcm
3 months ago
I was here
upvoted 1 times
smilingsun365

Ditto!
upvoted 1 times
You have a resource group named RG1.
You need to prevent the creation of virtual machines only in RG1. The solution must
ensure that other objects can be created in RG1.
• A. a lock
• B. an Azure role
• C. a tag
• D. an Azure policy
Correct Answer: D
In this question, we would create an Azure policy assigned to the resource group that
denies the creation of virtual machines in the resource group.
You could place a read-only lock on the resource group. However, that would prevent
the creation of any resources in the resource group, not virtual machines only.
Therefore, an Azure Policy is a better solution.
Reference:
Stez
2 days, 9 hours ago

Correct. D
upvoted 2 times
CarlosBarrero
2 months ago
correct
upvoted 1 times
What can Azure Information Protection encrypt?
• A. network traffic
• B. documents and email messages
• C. an Azure Storage account
• D. an Azure SQL database
Correct Answer: B
Azure Information Protection can encrypt documents and emails.
Azure Information Protection is a cloud-based solution that helps an organization to
classify and optionally, protect its documents and emails by applying labels.
Labels can be applied automatically by administrators who define rules and conditions,
manually by users, or a combination where users are given recommendations.
The protection technology uses Azure Rights Management (often abbreviated to Azure
RMS). This technology is integrated with other Microsoft cloud services and
applications, such as Office 365 and Azure Active Directory.
This protection technology uses encryption, identity, and authorization policies. Similarly
to the labels that are applied, protection that is applied by using Rights
Management stays with the documents and emails, independently of the location ‫ג‬€"
inside or outside your organization, networks, file servers, and applications.
References:
https://docs.microsoft.com/en-us/azure/information-protection/what-is-information-
protection https://docs.microsoft.com/en-us/azure/information-protection/quickstart-
label-dnf-protectedemail
Sandy4912

Azure Information Protection (sometimes referred to as AIP) is a cloud-based solution that helps
an organization to classify and optionally, protect its documents and emails by applying labels.
Labels can be applied automatically by administrators who define rules and conditions, manually
by users, or a combination where users are given recommendations. Ref :
https://docs.microsoft.com/en-us/azure/information-protection/what-is-information-protection
upvoted 24 times
MoSiyed

this came on the test
upvoted 15 times
vabna19
Most Recent 2 months, 1 week ago

b is correct
upvoted 1 times
panal

Correct
upvoted 2 times
chinnilax
B, a straight question
upvoted 1 times
fabras

b correct. https://docs.microsoft.com/en-us/azure/information-protection/what-is-information-
protection
upvoted 2 times
MK1368

B is correct
upvoted 1 times
Cloudyuga
11 months ago
yes its B
upvoted 2 times
axman832005

b - def on the test
upvoted 5 times
GKK

B - IRM
upvoted 2 times
success101

B is correct
upvoted 10 times
What should you use to evaluate whether your company‫ג‬€™s Azure environment
meets regulatory requirements?
• A. the Knowledge Center website

• B. the Advisor blade from the Azure portal
• C. Compliance Manager from the Service Trust Portal
• D. the Solutions blade from the Azure portal
Correct Answer: C
Compliance Manager in the Service Trust Portal is a workflow-based risk assessment
tool that helps you track, assign, and verify your organization's regulatory compliance
activities related to Microsoft Cloud services, such as Microsoft 365, Dynamics 365, and
Azure.
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/get-started-with-service-
trust-portal?view=o365-worldwide
mojoi
Highly Voted 4 weeks, 1 day ago

Compliance Manager has moved from the Service Trust Portal to its new location in the
Microsoft 365 compliance center https://docs.microsoft.com/en-us/microsoft-
365/compliance/get-started-with-service-trust-portal?view=o365-worldwide
upvoted 5 times
panal

Correct
upvoted 2 times
smcm
3 months ago
Correct
upvoted 2 times
HOTSPOT -
Hot Area:
Correct
Answer:
Azure Information Protection is used to automatically add a watermark to Microsoft

Word documents that contain credit card information.
You use Azure Information Protection labels to apply classification to documents and
emails. When you do this, the classification is identifiable regardless of where the data
is stored or with whom it‫ג‬€™s shared. The labels can include visual markings such as a
header, footer, or watermark.
Labels can be applied automatically by administrators who define rules and conditions,
manually by users, or a combination where users are given recommendations. In this
question, we would configure a label to be automatically applied to Microsoft Word
documents that contain credit card information. The label would then add the watermark
to the documents.
Reference:
https://docs.microsoft.com/en-us/azure/information-protection/what-is-information-
protection https://docs.microsoft.com/en-us/azure/information-protection/infoprotect-
quick-start-tutorial
sunsiva

AIP is used to add the water mark to the office documents.
upvoted 6 times
dotty88

AIP IS USED
upvoted 3 times
HOTSPOT -
Hot Area:
Correct
Answer:
The VNet will be marked as ‫ג‬€Ñon-compliant‫ג‬€™ when the policy is assigned.

However, it will not be deleted and will continue to function normally.
If there are any existing resources that aren't compliant with a new policy assignment,
they appear under Non-compliant resources.
Reference:
https://docs.microsoft.com/en-us/azure/governance/policy/assign-policy-portal
Gerardo1971
2 weeks ago
Correct answer
upvoted 2 times
SimonR2
1 month, 1 week ago

I remember reading something on thinkers it said it.would continue to function normally but
would flag the resource for non compliance with the policy. Answer is correct.
upvoted 3 times
SimonR2
1 month, 1 week ago

Sorry autocorrect! *Reading something on this and it said it would...*
upvoted 1 times
despair1990

I also have the feeling it should be read only...
upvoted 1 times
KTrout

Isn't this one Read Only Object vs continues to function normally?
upvoted 1 times
GreenyErin
I've tried to find anything on the subject, but the only thing MS writes is that the resource
becomes non-compliant - they don't mention any 'read only" or other changes that can happen
to the resource. So I would assume the correct answer should be "function normally", but it's on
the base of no other evidence rather than any solid source.
upvoted 6 times
vajeje

Your answer is correct. The RSG will get the status non-compliant. Unless you specify a
remediation in the policy, the current configuration will not get altered.
upvoted 2 times
KTrout

I appreciate you all getting back to me. Awesome site.
upvoted 1 times
Your company has an Azure subscription that contains resources in several regions.
A company policy states that administrators must only be allowed to create additional
Azure resources in a region in the country where their office is located.
You need to create the Azure resource that must be used to meet the policy
requirement.
• A. a read-only lock
• B. an Azure policy
• C. a management group
• D. a reservation
Correct Answer: B
Azure Policy meets this need by evaluating your resources for non- compliance with
assigned policies. All data stored by Azure Policy is encrypted at rest.
Azure Policy offers several built-in policies that are available by default. In this question,
we would use the ‫ג‬€Ãllowed Locations‫ג‬€™ policy to define the locations where
resources can be deployed.
References:
MSarmad

Was in the exam today
upvoted 19 times
burman84

Key word here "Policy"
upvoted 10 times
Gerardo1971

Correct answer
upvoted 1 times
hlacoucou
4 weeks ago
Was in the exam today
upvoted 5 times
Milan_Stan

An Azure policy, of course. "AllowedLocations" pre-defined policy can be used to limit the
region where resources can be deployed.
upvoted 2 times
panal

Correct
upvoted 1 times
Killer99

B is correct
upvoted 1 times
lsaunier

The context does not suggest there are several subscriptions so management group is not the
most logical answer. In Azure Policy, several built-in policies that are available by default. For
example: Allowed Locations (Deny): Restricts the available locations for new resources. Its effect
is used to enforce your geo-compliance requirements. https://docs.microsoft.com/en-
us/azure/governance/policy/overview
upvoted 1 times
vmn52222

B is correct
upvoted 1 times
ryce
7 months ago
why? it says resource which would be a management group, not azure policy.
upvoted 1 times
MK1368

B is correct. Azure Policy
upvoted 1 times
techy

I understand why people will choose policy, but the key word here is resource. Management
group is an azure resource and policy is a service. This policy would be applied to all
management groups, subscriptions, and resources under that management group by only
allowing VMs to be created in that region. Question already says the policy is there, you need to
create a resource where you can implement this policy. Please correct if inam wrong . The
question is confusing
upvoted 2 times
cvrlepa

A company policy states (company, not Azure policy)
upvoted 1 times
puja3113

For example, you can apply policies to a management group that limits the regions available for
virtual machine (VM) creation. This policy would be applied to all management groups,
subscriptions, and resources under that management group by only allowing VMs to be created
in that region.
upvoted 3 times
MarcP

To achieve what is requested, yes a policy need to be set-up, but the question is mentionning
which resource need to be created (to allow policty to be applied. A policy is not a resource. So
will go for a management group on which the policy will be set
upvoted 3 times
Sandy4912

Azure Policy is a service in Azure which allows you create polices which enforce and control the
properties of a resource. When these policies are used they enforce different rules and effects
over your resources, so those resources stay compliant with your IT governance standards. B is
correct answer
upvoted 5 times
Cloudyuga
11 months ago
correct it is Azure policy
upvoted 2 times
Abhikhedkar

B is correct
upvoted 1 times
success101

B is correct
upvoted 8 times
From Azure Cloud Shell, you can track your company‫ג‬€™s regulatory standards and
regulations, such as ISO 27001.
• B. the Microsoft Cloud Partner Portal
• C. Compliance Manager
• D. the Trust Center
Correct Answer: C
Microsoft Compliance Manager (Preview) is a free workflow-based risk assessment tool
that lets you track, assign, and verify regulatory compliance activities related to
Microsoft cloud services. Azure Cloud Shell, on the other hand, is an interactive,
authenticated, browser-accessible shell for managing Azure resources.
References:
https://docs.microsoft.com/en-us/microsoft-365/compliance/compliance-manager-
overview https://docs.microsoft.com/en-us/azure/cloud-shell/overview
nebula84

Had this question on actual exam. Compliance Manager was not even on the list, so it should be
Trust Center
upvoted 45 times
gelato

I guess you choose the best answer. The compliance manager is under the Trust Center.
upvoted 3 times
saravanaghanesh

Should be Trust Center
upvoted 16 times
gelato

Correct. The question states "track" not manage. If you want to manage use the Compliance
Manager.
upvoted 2 times
tartar
1 year ago
no, Trust Center is generic, the question asks about "your company"
upvoted 3 times
hlacoucou

I had this question in the exam 19/04/2021
upvoted 2 times
pprajapa

Did you get it right and if so was the answer from here correct.
upvoted 1 times
EricMok
1 month, 1 week ago

what is the underlined text?
upvoted 2 times
Kostia_Tamara
2 months ago
Compliance Manager is a correct answer, because you cannot access Trust Center via Azure
Cloud Shell, and this is the part of the question.
upvoted 2 times
type_12

C is correct
upvoted 1 times
panal

Correct
upvoted 1 times
Azurite

Similar question for compliance manager as a radio button question on Jan 24, 2021 exam
upvoted 3 times
Azurite

The answer C is correct. Compliance manager is a component of Azure Security Center which
checks subscription resources for compliance against regulatory standards: Azure CIS, PCI DSS
3.2, ISO 27001, and SOC TSP. Trust center just lists regulatory and compliance standards, that
Azure as a cloud portal company supports.
upvoted 4 times
Cricketer

It should be Security Center (you can check for ISO 27001 and others) for "Your Company"
upvoted 1 times
purek77

https://docs.microsoft.com/en-us/microsoft-365/compliance/compliance-manager?view=o365-
worldwide Question/answers are no longer valid - CM was transitioned out of MS TP.
upvoted 1 times
RahulKate
6 months ago
Trust Center - ISO 27001 Trust Center https://docs.microsoft.com/en-
us/learn/modules/examine-privacy-compliance-data-protection-standards/4-explore-trust-
center Azure Compliance - Payment Card Industry (PCI) Data Security Standard (DSS)
https://docs.microsoft.com/en-us/learn/modules/examine-privacy-compliance-data-protection-
standards/5-access-azure-compliance-documentation
upvoted 2 times
toto74500

Tutorial: Improve your regulatory compliance 10/11/2020 By default, Security Center supports
the following regulatory standards: Azure CIS, PCI DSS 3.2, ISO 27001, and SOC TSP. From
Security Center's menu, select Regulatory compliance. At the top of the screen, you see a
dashboard with an overview of your compliance status with the set of supported compliance
regulations. You can see your overall compliance score, and the number of passing vs. failing
assessments associated with each standard. https://docs.microsoft.com/en-us/azure/security-
center/security-center-compliance-dashboard So, i would vote for Compliance manager and not
the trust center
upvoted 2 times
mmdcert

Definitely C. I think this page says it all: https://docs.microsoft.com/en-us/microsoft-
365/compliance/offering-iso-27001?view=o365-worldwide#frequently-asked-questions
Basically, Trust Center provides you with info on regulations, such as ISO 27001, and audits on
Microsoft's compliance with the regulations. But YOU are responsible for the implementation of
the regulations in your company. However, if you have proper M365 plan, you can use
Compliance Manager to track and manage your organization's compliance.
upvoted 2 times
Stuudent

So why are we discussing M365 solutions in an AZURE fundamentals exam?
upvoted 1 times
Shades

In Azure portal , go to Security-->Policy&Compliance-->Regulatory compliance
upvoted 1 times
babufrik
9 months ago
C. Compliance Manager Official Info: Compliance Manager is a workflow-based risk assessment
dashboard within the Service Trust Portal that enables you to track, assign, and verify your
organization's regulatory compliance activities related to Microsoft professional services and
Microsoft cloud services
upvoted 1 times
sktrue

Compliance Manager, a workflow-based risk assessment tool in the Microsoft Service Trust
Portal, enables you to track, assign, and verify your organization's regulatory compliance
activities related to Microsoft Professional Services and Microsoft cloud services, such as
Microsoft Office 365, Microsoft Dynamics 365, https://azure.microsoft.com/is-is/blog/windows-
azure-trust-center-launched/ answer is D
upvoted 1 times
HOTSPOT -
select No.
Hot Area:
Correct
Answer:
Azure AD join only applies to Windows 10 devices.

Reference:
https://docs.microsoft.com/en-us/azure/active-directory-domain-services/manage-group-
policy https://docs.microsoft.com/en-us/azure/active-directory/devices/azureadjoin-plan
jprmartinho

N, you do it with Azure Active Directory Domain Services (Azure AD DS) Y, N, you can REGISTER
Windows 10, iOS, Android, and MacOS devices, NOT JOIN them -
https://docs.microsoft.com/en-us/azure/active-directory-domain-services/manage-group-policy
- https://docs.microsoft.com/en-us/azure/active-directory/devices/concept-azure-ad-join -
https://docs.microsoft.com/en-us/azure/active-directory/devices/concept-azure-ad-register
upvoted 17 times
Joe75

All of these should be "No". the first 2 are features of Azure AD Directory Services (AAD DS).
AAD DS is not the same product as AAD.
upvoted 6 times
HvD
3 months ago
You can join Windows 10 to Azure AD.
upvoted 2 times
mateo2121

You can join Windows 10 to Azure AD apart from Windows 10 Home version
upvoted 2 times
hf443
3 months ago
Agreed. https://docs.microsoft.com/en-us/azure/active-directory-domain-services/compare-
identity-solutions
upvoted 2 times
Divy95
3 months ago
As per the URL supplied, all of them should be 'Yes'. "Azure Active Directory (Azure AD) - Cloud-
based identity and mobile device management that provides user account and authentication
services for resources such as Microsoft 365, the Azure portal, or SaaS applications."
upvoted 1 times
hf443
3 months ago
No. Please read well. Group policy is only available for Active Directory Domain Services (AD DS)
and Azure Active Directory Domain Services (Azure AD DS). It is NOT available for Azure Active
Directory (Azure AD)
upvoted 5 times
Divy95
3 months ago
Devices can automatically enroll with MDM (Mobile Device Management) when signing in with
an Azure AD account. That's the whole idea of BYOD environment (allowing your personal
devices to be used for work purposes).
upvoted 1 times
SilkyS19

#1 N its Azure Active Directory Domain Service #2 Yes, You can configure Azure AD joined
devices for all Windows 10 devices with the exception of Windows 10 Home.
https://docs.microsoft.com/en-us/azure/active-directory/devices/concept-azure-ad-join #3 you
can Register Android devices but can not join them https://docs.microsoft.com/en-
us/azure/active-directory/devices/concept-azure-ad-register
upvoted 1 times
rich2508
1 week, 4 days ago

NYN 1. Group policies are not in Azure AD, they are in Azure AD DS 2. windows 10 except home
edition 3. IOS, MAC and android device an only register, not join to Azure AD
upvoted 1 times
Droplex
1 week, 4 days ago

YES YES NO, CAN BE DONE IN AD
upvoted 1 times
Gerardo1971
2 weeks ago
NO, YES, NO
upvoted 1 times
ceasar3000
3 weeks, 6 days ago

NO YES YES
upvoted 2 times
VVR141
1 month, 1 week ago

Ok Im not quite sure, but what i observed on Azure portal is if you go to your Azure Active
Directory service, on that home page you see under featured services : here I see AAD DS listed ,
If they consider AAD DS as subset of AAD services then the answer is correct. Answer will be Yes
if above explanation is correct.
upvoted 2 times
Ktroy0005

No, Yes, No
upvoted 3 times
Min_Thu

Ans should be NO , YES , NO. AADS doesn't not support GPO unless there has VPN back to on-
premise AADDS and GPO configured in on-premise
upvoted 2 times
vajeje

YES,YES,NO is correct. I have checked in my tenant which has 3000+ devices Windows 10
devices can have joined or registered. MacOS and Android can only have Registered. Joining a
W10 devices to the tenant allows you to apply policies to the computer and allows cloud users
inside your tenant to login to the device using their credentials
upvoted 3 times
zorkanz
It's essential to understand the differences when you’re looking at a “lift-and-shift” scenario
from on-prem to IaaS. If you are moving to the cloud by subscribing to SaaS applications or
rewriting existing applications using modern PaaS services, you’ll want to take advantage of
Azure Active Directory (AAD). AAD is our cloud-based identity solution that allows you to
leverage users, groups, applications and security principal concepts. It supports web-based
OAuth 2.0, SAML 2.0 and Open ID authentication frameworks. However, AAD does not have
capabilities like Group Policies or Application Containers or extensible schema, which is
sometimes required by some workloads, among other capabilities.
upvoted 1 times
stalag

First is YES. https://docs.microsoft.com/en-us/azure/active-directory-domain-services/manage-
group-policy
upvoted 1 times
[Removed]

No, Yes, Yes - There is no Group Policy in Azure AD only in Azture AD DS, not the same thing
upvoted 2 times
Milan_Stan

Check the below link. Groups are also available in Azure AD. Registration of android and other
mobile devices is possible with integrated MDM solutions, however only Windows 10 systems,
except Windows Home, can be joined to Azure-AD. So the answer is Yes, Yes, No.
https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-
compare-azure-ad-to-ad
upvoted 2 times
J0J0

My bet this is NO, YES, YES. 1. Azure AD does not support GPO, but AADDS does. 2. You can join
devices, Win10, Android, etc to Azure AD as part of Intune/MDM.
upvoted 4 times
jd2

I believe the answer is No, Yes, No
upvoted 1 times
HOTSPOT -
Hot Area:
Correct
Answer:
The Microsoft Privacy Statement explains what personal data Microsoft processes, how
Microsoft processes the data, and the purpose of processing the data
Reference:
https://privacy.microsoft.com/en-us/privacystatement
Sureshsurya
1 month ago
Yes, its correct
upvoted 3 times
Jazxz
1 month, 1 week ago

Has this on test week ago
upvoted 1 times
panal

Correct
upvoted 1 times
HOTSPOT -
Hot Area:
Correct
Answer:
Authentication, not authorization is the process of verifying a user‫ג‬€™s credentials.

The difference between authentication and authorization is:
✑ Authentication is proving your identity, proving that you are who you say you are. The
most common example of this is logging in to a system by providing credentials such as
a username and password.
✑ Authorization is what you‫ג‬€™re allowed to do once you‫ג‬€™ve been authenticated.
For example, what resources you‫ג‬€™re allowed to access and what you can do with
those resources.
nickosems

Answer is correct. Authentication verifies and validates your credentials. Authorization validates
what resource you have access to.
upvoted 2 times
hlacoucou
4 weeks ago
upvoted 2 times
freshmaker
1 month, 1 week ago

got this q
upvoted 2 times
Tas006

Answer is correct
upvoted 3 times
HOTSPOT -
Hot Area:
Correct
Answer:
Reference:
Ali000

There are a few key differences between Azure Policy and Azure role-based access control
(Azure RBAC). Azure Policy evaluates state by examining properties on resources that are
represented in Resource Manager and properties of some Resource Providers. Azure Policy
doesn't restrict actions (also called operations). Azure Policy ensures that resource state is
compliant to your business rules without concern for who made the change or who has
permission to make a change. Azure RBAC focuses on managing user actions at different
scopes. If control of an action is required, then Azure RBAC is the correct tool to use. Even if an
individual has access to perform an action, if the result is a non-compliant resource, Azure Policy
still blocks the create or update. The combination of Azure RBAC and Azure Policy provides full
scope control in Azure.
upvoted 6 times
nickosems

The answer is correct. An Azure initiative is a collection of Azure policy definitions that are
grouped together towards a specific goal or purpose in mind. Azure initiatives simplify
management of your policies by grouping a set of policies together as one single item.
https://techcommunity.microsoft.com/t5/itops-talk-blog/azure-policy-initiatives-vs-azure-
policies-when-should-i-use-one/ba-p/1229167
upvoted 2 times
billdozer
2 weeks, 3 days ago

Why would it not be the 2nd row? An Azure initiative is a collection of Azure policy definitions
that are grouped together towards a specific goal or purpose ... it’s recommend by the Product
group to use initiatives even for a single policy because once an initiative is assigned/created
then any additional policy definitions added to the initiative become part of the assignment
https://techcommunity.microsoft.com/t5/itops-talk-blog/azure-policy-initiatives-vs-azure-
policies-when-should-i-use-one/ba-p/1229167
upvoted 1 times
ChristerOlsen
2 weeks, 5 days ago

An initiative definition is a collection of policy definitions https://docs.microsoft.com/en-
us/azure/governance/policy/overview#initiative-definition
upvoted 2 times
hlacoucou
4 weeks ago
upvoted 4 times
manugr9
3 weeks, 3 days ago

... and what do you think is correct answer?
upvoted 2 times
Chief
4 weeks, 1 day ago

AZ policy enables you to define both individual policies and group of related policies, known as
initiatives (integrates with AZ DevOps)
upvoted 1 times
Ali000

To simplify management, several business rules can be grouped together to form a policy
initiative (sometimes called a policySet).
upvoted 2 times
Peace2_

Correct
upvoted 1 times
HOTSPOT -
Hot Area:
Correct
Answer:
Reference:
JayRee

Shouldn't the answer be management group? Azure policy enforces compliance but doesn't
manage it. If your organization has many subscriptions, you may need a way to efficiently
manage access, policies, and compliance for those subscriptions. https://docs.microsoft.com/en-
us/azure/governance/management-groups/overview Azure Policy helps to enforce
organizational standards and to assess compliance at-scale. https://docs.microsoft.com/en-
us/azure/governance/policy/overview
upvoted 12 times
HarryGrantolosi
2 months ago
I agree with you
upvoted 1 times
Kotinga

"Azure Policy evaluates all Azure resources at or below subscription-level, including..." - so,
anwer should be "management group"
upvoted 5 times
Kostia_Tamara

Both answers seams to be correct. See information about policy: Once your business rules have
been formed, the policy definition or initiative is assigned to any scope of resources that Azure
supports, such as management groups, subscriptions, resource groups, or individual resources.
upvoted 1 times
Canary_2021

Azure policy can be assigned to management groups, subscriptions, resource groups, and
resources. So answer 'Azure policy' is correct.
upvoted 2 times
Chuxman
1 week ago
I also will choose Management group.
upvoted 1 times
anirban7172
1 week ago
Azure policies can be used to define requirements for resource properties during deployment
and for already existing resources. Azure Policy controls properties such as the types or
locations of resources. Azure Policy is a service in Azure that you use to create, assign, and
manage policies. These policies enforce different rules and effects over your resources, so those
resources stay compliant with your corporate standards and service level agreements. Azure
Policy meets this need by evaluating your resources for non- compliance with assigned policies.
All data stored by Azure Policy is encrypted at rest. For example, you can have a policy to allow
only a certain SKU size of virtual machines in your environment. Once this policy is implemented,
new and existing resources are evaluated for compliance. With the right type of policy, existing
resources can be brought into compliance.
upvoted 1 times
Bursuc03
2 weeks, 4 days ago

The correct response should be Management Groups. The keywords here are "manage" and
"multiple subscriptions". Management groups are the only containers that can group
subscriptions, with the explicit purpose of managing them using Azure policies.
upvoted 2 times
Jude_Mac
3 weeks, 1 day ago

i had a hard time choosing between Azure policies and Management Groups as, i really don't
know what is the correct answer.. At first i think the answer is Azure Policies because of the key
word "compliance", then now i'm confused because a lot said answer should be Management
Group.
upvoted 1 times
Chief
3 weeks, 6 days ago

Azure Policy evaluates resources in Azure by comparing the properties of those resources to
business rules. These business rules, described in JSON format, are known as policy definitions.
To simplify management, several business rules can be grouped together to form a policy
initiative (sometimes called a policySet). Once your business rules have been formed, the policy
definition or initiative is assigned to any scope of resources that Azure supports, such as
management groups, subscriptions, resource groups, or individual resources. The assignment
applies to all resources within the Resource Manager scope of that assignment. Subscopes can
be excluded, if necessary. For more information, see Scope in Azure Policy.
upvoted 1 times
Chief
3 weeks, 6 days ago

If your organization has many subscriptions, you may need a way to efficiently manage access,
policies, and compliance for those subscriptions. Azure management groups provide a level of
scope above subscriptions. You organize subscriptions into containers called "management
groups" and apply your governance conditions to the management groups. All subscriptions
within a management group automatically inherit the conditions applied to the management
group. Management groups give you enterprise-grade management at a large scale no matter
what type of subscriptions you might have. All subscriptions within a single management group
must trust the same Azure Active Directory tenant.
upvoted 1 times
ranajee
1 month ago
"Management Groups" is the right answer
upvoted 1 times
Tas006

Answer here is management groups !
upvoted 1 times
DavoFlavo

Answer should be B: Management groups. https://docs.microsoft.com/en-
us/azure/governance/management-groups/create-management-group-portal
upvoted 1 times
Tas006
Answer is management group.
upvoted 1 times
Yoshh

Answer should be management group
upvoted 1 times
jose

https://docs.microsoft.com/en-us/azure/governance/policy/overview "Once your business rules
have been formed, the policy definition or initiative is assigned to any scope of resources that
Azure supports, such as management groups, subscriptions, resource groups, or individual
resources" https://docs.microsoft.com/en-us/azure/governance/policy/concepts/scope
upvoted 1 times
himanshukk
2 months ago
It should be Management group
upvoted 4 times
Odieperez
2 months ago
If your organization has many subscriptions, you may need a way to efficiently manage access,
policies, and compliance for those subscriptions. Azure management groups provide a level of
scope above subscriptions. https://docs.microsoft.com/en-us/azure/governance/management-
groups/overview
upvoted 2 times
HOTSPOT -
select No.
Hot Area:
Correct
Answer:
Reference:
https://azure.microsoft.com/en-gb/blog/new-capabilities-to-enable-robust-gdpr-
compliance/
flex2021
1 month ago
yes to all 3
upvoted 2 times
nickname_200

I got it on the exam
upvoted 4 times
HOTSPOT -
select No.
Hot Area:
Correct
Answer:
Reference:
https://docs.microsoft.com/en-us/azure/governance/blueprints/overview
baljaa

I think all should be YES as a resource group is one of artifacts of Blueprint.
upvoted 6 times
used4junk
2 months ago
No because.. you cannot assign a blueprint to a <resource group> ❌ You can however assign
a blueprint to a <management group>, but that was not the question.
upvoted 9 times
FabiZamora93

Based on https://docs.microsoft.com/en-us/azure/governance/blueprints/overview Y: Each
blueprint can consist of zero or more ARM template artifacts. This support means that previous
efforts to develop and maintain a library of ARM templates are reusable in Azure Blueprints.
N:Create a new resource group for use by other artifacts WITHIN the blueprint. When creating a
blueprint definition, you'll define where the blueprint is saved. Blueprints can be saved to a
management group or subscription that you have Contributor access to. If the location is a
management group, the blueprint is available to assign to any child subscription of that
management group. Each Published Version of a blueprint can be assigned (with a max name
length of 90 characters) to an existing management group or subscription. Y:The blueprint
definition permissions must be granted or inherited on the management group or subscription
scope where it is saved --> Meaning this would grant permissions to the resources
upvoted 5 times
Canary_2021

When create an Azure Blueprint draft you can select a subscription. When you assign the
Blueprint draft, you can specify resource group name and location. In this way, 'you create
resource group under the selected subscription during Blueprint assignment. So you can you
cannot assign a blueprint to a resource group' should be correct.
upvoted 1 times
Canary_2021
2 days, 8 hours ago

So 'you can you can assign a blueprint to a resource group' should be correct.
upvoted 1 times
Chief
4 weeks, 1 day ago

https://docs.microsoft.com/en-us/azure/governance/blueprints/overview
upvoted 1 times
Odieperez
2 months ago
All 3 are Yes: Create a new resource group for use by other artifacts within the blueprint. These
placeholder resource groups enable you to organize resources exactly the way you want them
structured and provides a scope limiter for included policy and role assignment artifacts and
ARM templates. https://docs.microsoft.com/en-us/azure/governance/blueprints/overview
upvoted 4 times
Lakoth
2 months ago
The answer is correct: "Each Published Version of a blueprint can be assigned (with a max name
length of 90 characters) to an existing management group or subscription" source:
https://docs.microsoft.com/en-us/azure/governance/blueprints/overview#blueprint-assignment
-> B=NO (cannot be assigned to a resource group) -> C=YES (can be assigned to a
management group or subscription, which would grant permissions to the resources)
upvoted 3 times
NareshNK
2 months ago
Blueprints are a declarative way to orchestrate the deployment of various resource templates
and other artifacts such as: Role Assignments Policy Assignments Azure Resource Manager
templates (ARM templates) Resource Groups All should be...........Yes
upvoted 4 times
nerv
1 month, 1 week ago

REad what you quoted. Blueprints organize, among others, resource groups. This is like you are
quoting that cities have and orchestrate of deployment of building, parks etc. Ergo - cities are
part of buildings - NO. Building can be part of cities but not vice verse.
upvoted 4 times
vajeje

correct
upvoted 2 times
HOTSPOT -
select No.
Hot Area:
Correct
Answer:
Reference:
https://docs.microsoft.com/en-us/azure/china/overview-operations
https://docs.microsoft.com/en-us/azure/azure-government/documentation-government-
welcome
Bernal8
1 month, 1 week ago

Correct!
upvoted 2 times
SamPhisher

Reference is corrupted. So sad
upvoted 1 times
johnyjohny1
1 month ago
By "Reference" you mean "China"?
upvoted 6 times
Odieperez
2 months ago
Correct: Microsoft Azure operated by 21Vianet (Azure China) is a physically separated instance
of cloud services located in China. It's independently operated and transacted by Shanghai Blue
Cloud Technology Co., Ltd. ("21Vianet"), a wholly owned subsidiary of Beijing 21Vianet
Broadband Data Center Co., Ltd
upvoted 2 times
HOTSPOT -
select No.
Hot Area:
Correct
Answer:
References:
https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/lock-
resources
vasonic

The answer in box 3 is yes, I have student subscription for Azure and I just tried adding a read-
only lock and then adding a delete lock. It was successful. So BOX 3 -> YES
upvoted 18 times
SimonR2
Highly Voted 1 month, 1 week ago

A - Can you have multiple delete locks on a resource? YES Confirmed, with screenshots in the
below article. - https://stackoverflow.com/questions/65408486/why-azure-provides-multiple-
delete-locks-on-a-virtual-machine B - Are locks inherited from a resource group? YES When you
apply a lock at a parent scope, all resources within that scope inherit the same lock. Even
resources you add later inherit the lock from the parent. The most restrictive lock in the
inheritance takes precedence. If you want to create a lock at a parent level, select the parent. The
currently selected resource inherits the lock from the parent. For example, you could lock the
resource group to apply a lock to all its resources. - https://docs.microsoft.com/en-
us/azure/azure-resource-manager/management/lock-
resources#:~:text=In%20the%20Settings%20blade%20for,the%20lock%20from%20the%20paren
t C - If you have a read only lock, can you add a delete lock? YES Confirmed as possible by
vasonic in a previous comment in lab.
upvoted 14 times
nickosems

Just Tested 1 and 3 on Azure using student test account. And Yes, the answers are correct. YYY.
A resource with a any type of lock (read-only or delete locks) can not be deleted automatically.
You would have to remove the locks before deleting the resources - Tested.
upvoted 1 times
Bassam22
1 week, 3 days ago

what's the benefit to add 2 locks?
upvoted 2 times
Gerardo1971
1 week, 6 days ago
Correct answer
upvoted 2 times
Sam_ugo
1 month, 1 week ago

Encountered this question in my test today
upvoted 3 times
sdas2021

Came in the test yesterday
upvoted 3 times
Luisete22222

First one should be false, there is no 2delete locks, there are delete+readonly
upvoted 1 times
mzortys

Video explains concept - 3 is Yes https://youtu.be/eDH20Ve0eI0?t=281
upvoted 1 times
ttn

Box 3: I think, the answer is Yes because Readonly lock means "No update" incl. "no delete".
while the Delete locks means "no delete", why they both can exist.
upvoted 3 times
Sam2969

a Lock is to protect the ressource and not to asign rights on it. A read-only Lock will protect the
ressource from modification . A Delete lock will protect the resource from deletion. you can add
many locks to a ressource and give each lock a different name.
upvoted 3 times
sinear

Answer to A is indeed Yes: info here: https://stackoverflow.com/questions/65408486/why-azure-
provides-multiple-delete-locks-on-a-virtual-
machine#:~:text=As%20we%20know%20that%20we,as%20same%20as%20multiple%20locks.
"For your question that why Azure provides multiple delete locks on the same resource. I think
the main reason is that you could directly set a lock on a subscription, resource group, or
resource level in a resource UI instead of going back to set the lock in each resource UI."
upvoted 1 times
panal

Correct
upvoted 3 times
JD365

This was on the exam on 12th Feb 2021
upvoted 6 times
Arrakis
3 months ago
I have added 2 locks (one delete + one read-only) to my resource group. I suggest you get a
free Azure account and try it yourself.
upvoted 5 times
BlackRiders
3 months ago
Box3 is tricky statement. If an azure resource has only ReadOnly lock.. doesn't mean we as an
admin cannot add the delete lock into it.
upvoted 2 times
AWSGURU_24
3 months ago
ReadOnly means authorized users can read a resource, but they can't delete or update the
resource. Applying this lock is similar to restricting all authorized users to the permissions
granted by the Reader role. Answer is NO.
upvoted 1 times
Your company plans to migrate all on-premises data to Azure.
You need to identify whether Azure complies with the company‫ג‬€™s regional
requirements.
• A. the Knowledge Center

• B. Azure Marketplace
• C. the Azure portal
• D. the Trust Center
Correct Answer: D
Azure has more than 90 compliance certifications, including over 50 specific to global
regions and countries, such as the US, the European Union, Germany,
Japan, the United Kingdom, India and China.
You can view a list of compliance certifications in the Trust Center to determine whether
Azure meets your regional requirements.
Reference:
https://azure.microsoft.com/en-gb/overview/trusted-cloud/compliance/
https://docs.microsoft.com/en-us/microsoft-365/compliance/get-started-with-service-
trust-portal
ceasar3000
3 weeks, 6 days ago

It Should be Azure compliance documentation. Tho we go with D since its closest
upvoted 3 times
Ray12345

correct!
upvoted 1 times
Dangotthejugo

Correct
upvoted 1 times
HOTSPOT -
select No.
Hot Area:
Correct
Answer:
Box 1: No -
Authorization to access Azure resources can be provided by other identity providers by
using federation. A commonly used example of this is to federate your on- premises
Active Directory environment with Azure AD and use this federation for authentication
and authorization.
Box 2: Yes -
As described above, third-party cloud services and on-premises Active Directory can be
used to access Azure resources. This is known as ‫ג‬€˜federation‫ג‬€™.
Federation is a collection of domains that have established trust. The level of trust may
vary, but typically includes authentication and almost always includes authorization. A
typical federation might include a number of organizations that have established trust for
shared access to a set of resources.
Box 3: Yes -
Azure Active Directory (Azure AD) is a centralized identity provider in the cloud. This is
the primary built-in authentication and authorization service to provide secure access to
Azure resources.
References:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/whatis-fed
scenarios
turtle666

some modification in option 1 in real exam changed to user at on-prem or azure AD can access
Azure resource.
upvoted 33 times
monsigs

Azure AD is responsible for AUTHENTICATION, and RBAC is for AUTHORIZATION..
upvoted 25 times
kachraSeth
9 months ago
This is the best explaination and the simplest too.
upvoted 4 times
TakumaK

Agreed. Simple and concise.
upvoted 1 times
panal

Given Answer is Correct
upvoted 2 times
MrNY007
3 months ago
I recall from training the difference between authentication and authorization, just thinking of it i
think is hould be No, No - does not mean you are authorized to access resources - and Yes. A
week away from my test, any good soul that can help understanding this?
upvoted 1 times
Woodlandsu35

So after all the discussion so far: What is is the correct answer now, with respect to passing the
test? Thx to all...
upvoted 2 times
mikl

This is probably the most tricky question in the entire exam dump. Anyone who can clarify for
me and all others?
upvoted 2 times
HardikPathak

It should be No, No, Yes
upvoted 1 times
jpeg95
8 months ago
Option B: states that identities store in on-premises Active Directory can also be used to access
Azure resources. Identities in On-premise Active Directories have to be brought into Azure AD
via AD connect. As it has not specifically been said that AD connect is being used, we will mark
this Option as wrong. https://k21academy.com/microsoft-azure/az-900/az-900-microsoft-azure-
core-identity-services-azure-ad-mfa/ Options B should be False
upvoted 4 times
ConaxLearn
9 months ago
B is true. External Identities can be configured to access azure resources.
https://www.youtube.com/watch?v=xJsoWCjZviE When B is true, A can only be false.
upvoted 1 times
babuvt

1. No ( Azure AD is not the only means to authenticate/authorize) 2. Yes ( All the ones
mentioned can provide authorization) 3. Yes
upvoted 16 times
MYN

First one is No as it is asking for authorization.
upvoted 1 times
tom931684

A good example of the first answer being NO is a web app in an app service resource. You
usually allow non-authenticated user access to this web app.
upvoted 6 times
Indu0311
1 year ago
Is the second answer right.? Third party cloud service can be anything
upvoted 3 times
gelato

The second should be wrong. But I think I'm getting it. Because Azure Resources that has public
links are available to any services outside azure.
upvoted 1 times
ArunVasu

Correct answer No, yes , yes
upvoted 6 times
skiwi

Agreed, the first one is no. Examples, you can access BLOB with a SAS key and SQL DB doesnt
support AD authentication
upvoted 5 times
RAD0

The question should be Identities synced from On Prem AD & Other cloud Identities. How an on
Prem Account can access azure resources without synced?
upvoted 3 times
iTranc3

It should be yes, yes, yes
upvoted 7 times
Luka

Why the first one should be yes while you can access azure with any external users
upvoted 15 times
Betta
10 months ago
Wont the external users become a part and listed under the users feature of Azure AD as guest
users
upvoted 4 times
notjon
https://docs.microsoft.com/en-us/security/compass/identity#use-cloud-provider-identity-
source-for-third-parties Hopefully this helps a little...
upvoted 1 times
Manideep21
10 months ago
But it doesn't change the fact that he is an external user (like, suppose he is from some other
organization and you can give access to your resources by giving a guest identity)
upvoted 2 times
Nikhlesh
10 months ago
Authorization can set to groups as well, not only users
upvoted 4 times
Burkidur

Also to service principals (apps).
upvoted 4 times
HOTSPOT -
Hot Area:
Correct
Answer:
You can configure a lock on a resource group to prevent the accidental deletion of the
resource group. The lock applies to everyone, including global administrators. If you
want to delete the resource group, the lock must be removed first.
As an administrator, you may need to lock a subscription, resource group, or resource
to prevent other users in your organization from accidentally deleting or modifying
critical resources. You can set the lock level to CanNotDelete or ReadOnly. In the
portal, the locks are called Delete and Read-only respectively.
✑ CanNotDelete means authorized users can still read and modify a resource, but they
can't delete the resource.
ReadOnly means authorized users can read a resource, but they can't delete or update
the resource. Applying this lock is similar to restricting all authorized
users to the permissions granted by the Reader role.
Reference:
https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-lock-
resources
petrumandreanu

corect
upvoted 2 times
Azure Germany can be used by legal residents of Germany only.
• A. no change is needed
• B. only enterprises that are registered in Germany
• C. only enterprises that purchase their azure licenses from a partner based in Germany
• D. any user or enterprise that requires its data to reside in Germany
Correct Answer: D
Azure Germany is available to eligible customers and partners globally who intend to do
business in the EU/EFTA, including the United Kingdom.
Azure Germany offers a separate instance of Microsoft Azure services from within
German datacenters. The datacenters are in two locations, Frankfurt/Main and
Magdeburg. This placement ensures that customer data remains in Germany and that
the datacenters connect to each other through a private network. All customer data is
exclusively stored in those datacenters. A designated German company--the German
data trustee--controls access to customer data and the systems and infrastructure that
hold customer data.
References:
https://docs.microsoft.com/en-us/azure/germany/germany-
welcome?toc=%2fazure%2fgermany%2ftoc.json https://docs.microsoft.com/en-
us/azure/germany/germany-overview-data-trustee
erikd

The correct answer is not given here, as MS states: "Azure Germany is available to eligible
customers and partners globally who intend to do business in the EU/EFTA, including the United
Kingdom."
upvoted 16 times
foreverlearner
1 year ago
UK not for long, though :) That's mostly around GDPR and other regulatory compliance.
Germany is part the EU, so most of them are the same also for other EU countries, other more
sensitive might not be allowed to leave the country. In any way, your comment is correct, as is
the answer
upvoted 1 times
success101

Correct Answer is D
upvoted 11 times
Gerardo1971

Correct answer
upvoted 1 times
panal

Correct Answer is D
upvoted 2 times
aruni_mishra

"on Sept 30th, 2020, we announced that the Microsoft Cloud Germany would be closing on
October 29th, 2021" https://docs.microsoft.com/en-us/azure/germany/germany-welcome
upvoted 1 times
Kumar1983

This is because of two new data centers in Germany, and hence MS is asking customers to
complete migration by a certain date in 2021
upvoted 1 times
Mani082

does data need to reside in Germany for sure?
upvoted 1 times
tcbw

D: "offering customer data residency" (https://docs.microsoft.com/en-
us/azure/germany/germany-get-started-connect-with-portal)
upvoted 1 times
Qrm_1972

D is the correct choice
upvoted 1 times
Babustest
10 months ago
That credit goes only to China
upvoted 1 times
satishk4u

Azure Germany is available to eligible customers and partners globally who intend to do
business in the EU/EFTA, including the United Kingdom. https://docs.microsoft.com/en-
us/azure/germany/germany-welcome
upvoted 1 times
1 year, 1 month ago

B and C are racists by the way hahaha of course it's D. Some business contracts, probably
governmental contracts, require the data TO STAY in the country! it cannot leave no matter how
much security you use, it cannot leave !
upvoted 4 times
sidd27

Agree with erikd completely
upvoted 2 times
axman832005

didn't see any azure germany questions on the test
upvoted 6 times
Capo
1 year, 1 month ago

hi the exam questions here in this site are enough or you prepared from any other source as
well ?
upvoted 2 times
HOTSPOT -
select No.
Hot Area:
Correct
Answer:
Box 1: Yes -
The tool you would use to sync the accounts is Azure AD Connect. The Azure Active
Directory Connect synchronization services (Azure AD Connect sync) is a main
synchronize identity data between your on-premises environment and
Azure AD.
Box 2: Yes -
As described above, third-party cloud services and on-premises Active Directory can be
used to access Azure resources. This is known as ‫ג‬€˜federation‫ג‬€™.
Federation is a collection of domains that have established trust. The level of trust may
vary, but typically includes authentication and almost always includes authorization. A
typical federation might include a number of organizations that have established trust for
shared access to a set of resources.
Box 3: Yes -
Azure resources.
References:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-
whatis https://docs.microsoft.com/en-us/azure/active-directory/hybrid/whatis-fed
scenarios
Harish2004

Correct
upvoted 3 times
ReginaldoBarreto

Yes to all
upvoted 3 times
panal

Correct
upvoted 1 times
TakumaK

Can you tell me the difference between AD and AAD?
upvoted 1 times
JesusUB

AD is classic Active Directory you install in your on-premise servers. AAD is Azure Active
Directory.
upvoted 3 times
HOTSPOT -
Hot Area:
Correct
Answer:
The advanced monitoring capabilities in Security Center lets you track and manage
your workload.
Reference:
safaa
2 weeks, 3 days ago

correct!
upvoted 2 times
What should you use to evaluate whether your company‫ג‬€™s Azure environment
meets regulatory requirements?
• A. Azure Service Health

• B. Azure Knowledge Center
• C. Azure Security Center
• D. Azure Advisor
Correct Answer: C
The advanced monitoring capabilities in Security Center lets you track and manage
your workload.
Reference:
Caris

correct
upvoted 2 times
Your company has an Azure subscription that contains resources in several regions.
You need to ensure that administrators can only create resources in those regions.
• A. a read-only lock
• B. an Azure policy
• C. a management group
• D. a reservation
Correct Answer: B
Reference:
Tecatero2001
1 day, 10 hours ago

Correct!!!
upvoted 1 times
HOTSPOT -
select No.
Hot Area:
Correct
Answer:
Box 1: No -
Azure Active Directory (Azure AD) is a cloud-based service. It does not require domain
controllers on virtual machines.
Box 2: Yes -
Azure resources and Microsoft 365.
Box 3: No -
User accounts in Azure Active Directory can be assigned multiple licenses for different
Azure or Microsoft 365 services.
panal

Correct
upvoted 8 times
mis3lin

no, no, yes
upvoted 1 times
Brasotes
2 weeks, 6 days ago

what is the explanation for your answer?
upvoted 2 times
Which two types of customers are eligible to use Azure Government to develop a cloud
solution? Each correct answer presents a complete solution.
• A. a Canadian government contractor

• B. a European government contractor
• C. a United States government entity
• D. a United States government contractor
• E. a European government entity
Correct Answer: CD
Azure Government is a cloud environment specifically built to meet compliance and
security requirements for US government. This mission-critical cloud delivers
breakthrough innovation to U.S. government customers and their partners. Azure
Government applies to government at any level ‫ג‬€" from state and local governments to
federal agencies including Department of Defense agencies.
The key difference between Microsoft Azure and Microsoft Azure Government is that
Azure Government is a sovereign cloud. It's a physically separated instance of Azure,
dedicated to U.S. government workloads only. It's built exclusively for government
agencies and their solution providers.
References:
https://docs.microsoft.com/en-us/learn/modules/intro-to-azure-government/2-what-is-
azure-government
Nakish

Azure Government is a cloud environment specifically built to meet compliance and security
requirements for US government.
upvoted 47 times
1 year, 1 month ago

very American naming...
upvoted 40 times
Raven777

Who f-ing cares (outside the US)? Ridiculous question.
upvoted 33 times
AnxiousKid

literally people who lives outside the US lmao
upvoted 1 times
hob
3 months ago
This is because everything related to DoD and Gov are US only. But you may find some things
regarding this two institutions while working.
upvoted 1 times
kachraSeth
9 months ago
They are just bragging about these so called special data centers
upvoted 5 times
benynek

People who lives outside of the US.
upvoted 5 times
Gerardo1971

Correct answer
upvoted 1 times
pigandarias
1 month, 1 week ago
appeared on 05/04/2021 exam
upvoted 2 times
sumitraj04

Yes within US government.
upvoted 1 times
jinyongzi

C and D
upvoted 1 times
Janu12

It’s a great service for Americans
upvoted 1 times
Sandeeptp
2 months ago
C and D.. It's for US govt
upvoted 1 times
rob_724
2 months ago
the US have it all...
upvoted 1 times
panal

Correct
upvoted 1 times
Beros

I am curious about the new questions. Every question has at least one year alt disscusion. where
is the new ones.
upvoted 2 times
Massy
3 months ago
not every, there are questions with no comments or only recent comments
upvoted 1 times
Ebenezer

It's all American.
upvoted 2 times
bb90

I am surprised that Azure government is not available to EU
upvoted 1 times
Eli_Man97
10 months ago
Not questioning the answer, just Saying that MS Branding of this cloud solution could have
been better .
upvoted 3 times
Clouddog

The key difference between Microsoft Azure and Microsoft Azure Government is that Azure
Government is a sovereign cloud. It's a physically separated instance of Azure, dedicated to U.S.
government workloads only.
upvoted 5 times
kumardeb

These countries are using azure US Germany China
upvoted 3 times
emraanmeer

C & D are correct answers
upvoted 1 times
HOTSPOT -
select No.
Hot Area:
Correct
Answer:
Box 1: No -
It is not true that you must deploy a federation solution or sync on-premises identities to
the cloud. You can have a cloud-only environment and use MFA.
Box 2: No -
Picture identification and passport numbers are not valid MFA authentication methods.
Valid methods include: Password, Microsoft Authenticator App, SMS and
Voice call.
Box 3:
You can configure MFA to be required for administrator accounts only or you can
configure MFA for any user account.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-
getstarted https://docs.microsoft.com/en-us/azure/active-
directory/authentication/concept-authentication-methods
SunilBudhwani
1 week, 1 day ago

Hybrid identity scenarios: Azure AD Connect is deployed and user identities are synchronized or
federated with the on-premises Active Directory Domain Services with Azure Active Directory.
upvoted 1 times
SunilBudhwani
1 week, 1 day ago

Question 1 saying "On_prem identity" this mean they must sync with AD/FED first, Answer must
be "Yes"
upvoted 1 times
TP333

1st question is kinda confusing, Microsoft MUST address it. It can be YES and NO
upvoted 4 times
MaximeHU
1 week, 4 days ago

indeed
upvoted 1 times
NareshNK
2 months ago
The catch is a "must" word used in the question. it is not mandatory to have On-Prem identities
to sync for multifactor auth.
upvoted 3 times
vajeje

NO, NO, YES is correct. the first one is NOT yes because syncing your identities from on-prem
makes sure you get the single sign on experience using the same username and password. You
can perfectly setup a cloud only user account with MFA.
upvoted 2 times
Nora1996

what is the correct answer for A?
upvoted 1 times
panal

Correct.
upvoted 1 times
TakumaK
You said correct. Can you tell my why A is No?
upvoted 1 times
ShawnKW

"panal" only knows one word. Correct. LAMO!!!
upvoted 4 times
rob_724
2 months ago
MFA can be used even with cloud user only. On-prem sync is not a requirement.
upvoted 2 times
Arko_Brad

Right, MFA can be used with cloud user only. So one needs to sync AD users from on premise to
Azure AD for MFA to work. Hence it should be YES. Right?
upvoted 2 times
rob_724

I see your point, and I partially blame the wordings of the question. If you have on-prem
resources, then yep you need to sync ito cloud for MFA -- specific case scenario. However, if you
dont have on-prem users, only cloud -- then you can avail for MFA. No need to provision on-
prem resources just to avail for this.
upvoted 1 times
qwerty123456789963

Isn't first should be YES????????
upvoted 4 times
HOTSPOT -
Hot Area:
Correct
Answer:
Composite SLAs involve multiple services supporting an application, each with differing
levels of availability. For example, consider an App Service web app that writes to Azure
SQL Database. At the time of this writing, these Azure services have the following
SLAs:
✑ App Service web apps = 99.95%
✑ SQL Database = 99.99%
What is the maximum downtime you would expect for this application? If either service
fails, the whole application fails. The probability of each service failing is independent,
so the composite SLA for this application is 99.95% — 99.99% = 99.94%. That's lower
than the individual SLAs, which isn't surprising because an application that relies on
multiple services has more potential failure points.
Reference:
https://docs.microsoft.com/en-us/azure/architecture/reliability/requirements#understand-
service-level-agreements
rbarrela
Highly Voted 1 month ago

That option is correct, however you must do 99.95% x 99.99% = 99.94% and not "-"
upvoted 7 times
tracyrow

The detail on the correct answer should show multiplication as SLA is the product of the SLAs
MULTIPLIED.
upvoted 1 times
bcih

correct
upvoted 3 times
panal
3 months ago
Correct
upvoted 3 times
Joe75

https://docs.microsoft.com/en-us/azure/architecture/framework/resiliency/business-metrics
upvoted 2 times
HOTSPOT -
select No.
Hot Area:
Correct
Answer:
Box 1: Yes -
SLA‫ג‬€™s vary based on the resource type and the location distribution of the resource.
However, the minimum uptime for all Azure services is 99.9 percent.
Box 2: Yes -
The SLA guaranteed uptime is increased (usually to 99.95 percent) when resources are
deployed across multiple regions.
Box 3: No -
The number of subscriptions is unrelated to uptime SLA‫ג‬€™s. You can deploy
resources to multiple regions under a single subscription or you can have multiple
subscriptions with resources deployed to the same region.
Reference:
https://azure.microsoft.com/en-us/support/legal/sla/summary/
foreverlearner

1) Yes - minimum guaranteed is 99.9% 2) Yes - Multiple AZ give you fault tolerance, Multiple
regions give you Disaster Recovery. Should a whole region fail, it would take much longer to
wait for it to come back, or redeploy everything in a new region, than already having the
resources/services in said different region. Therefore, having services/resources span across
multiple region CAN increase SLA (decrease downtime) 3) No - SLAs are for services, not
subscriptions
upvoted 27 times
mrabello23

Second is NO. If you deploy services in multile regions without explicit activate AZ feature in the
resource they will not increase anything.
upvoted 1 times
fquintasp

2nd question is NO. "Availability Zones are physically separate locations within an Azure region".
Availability zones is only used for fault-tolernace in the same region not across diferent regions
upvoted 25 times
Gerardo1971

Correct answer
upvoted 1 times
Tomsss12345
1 month, 1 week ago

MSFT is so careless with their language on these exams.....
upvoted 3 times
vajeje

NO,YES,NO https://azure.microsoft.com/en-us/support/legal/sla/virtual-machines/v1_9/
upvoted 2 times
Boboshlap

I agree, as there are two exceptions with SLAunder 99,9%: 1. For any Single Instance Virtual
Machine using Standard SSD Managed Disks for Operating System Disk and Data Disks, we
guarantee you will have Virtual Machine Connectivity of at least 99.5%. 2. For any Single
Instance Virtual Machine using Standard HDD Managed Disks for Operating System Disks and
Data Disks, we guarantee you will have Virtual Machine Connectivity of at least 95%.
upvoted 2 times
DataGuy81

First question is correct as This is a free service zure Kubernetes Service (AKS) As a free service,
AKS does not offer a financially-backed service level agreement. We will strive to attain at least
99.5% availability for the Kubernetes API server.
upvoted 1 times
panal

NO, YES, NO https://azure.microsoft.com/en-us/support/legal/sla/virtual-machines/v1_9/
upvoted 3 times
WillHayes

saumenP has it right - Yes, Yes, No based on this article https://docs.microsoft.com/en-
us/azure/best-practices-availability-paired-regions
upvoted 2 times
Urpiano

NO, YES, NO. The first is NO because https://azure.microsoft.com/en-
us/support/legal/sla/virtual-machines/v1_9/: "or any Single Instance Virtual Machine using
Standard HDD Managed Disks for Operating System Disks and Data Disks, we guarantee you
will have Virtual Machine Connectivity of at least 95%."
upvoted 3 times
sreekarv

At least 99.9% uptime for paid azure services.. Azure Kubernetes Service (AKS) as a free service,
does not offer a financially-backed service level agreement. We will strive to attain at least 99.5%
availability for the Kubernetes API server. https://azure.microsoft.com/en-
us/support/legal/sla/summary/
upvoted 2 times
Priyesh16

Anyone know what the final answer to this is?
upvoted 1 times
AndreeaD06

https://docs.microsoft.com/en-us/azure/architecture/framework/resiliency/business-
metrics#slas-for-multiregion-deployments
upvoted 2 times
Mahajan

Azure Kubernetes Service (AKS) As a free service, AKS does not offer a financially-backed service
level agreement. We will strive to attain at least 99.5% availability for the Kubernetes API server.
The availability of the agent nodes in your cluster is covered by the Virtual Machines SLA. Please
see the Virtual Machines SLA for more details.
upvoted 2 times
liloda

First answer is No. Azure HPC Cache is a paid service: https://azure.microsoft.com/en-
us/pricing/details/hpc-cache/ And "We will strive to attain at least 99% availability for the service
interface": https://azure.microsoft.com/en-us/support/legal/sla/hpc-cache/v1_0/ You can stay up
to date with SLA changes here: https://azure.microsoft.com/en-us/support/legal/sla/summary/
upvoted 2 times
theRunner

Although VM with HDD gurantees an SLA of 95%, Microsoft itself states that its SLA ranges from
99.9% - 99.999%. https://docs.microsoft.com/en-us/learn/modules/explore-azure-
infrastructure/6-service-level-agreements
upvoted 1 times
stits
8 months ago
I agree first answer is NO. Above people are talking about a VM of 99,9% but that is when
managed premium disks are used. With standard disks the availability is 99,5% and with HDD it
is 95%
upvoted 3 times
imti3

Yap 1) Yes - minimum guaranteed is 99.9% 2) Yes - Multiple AZ give you fault tolerance,
Multiple regions give you Disaster Recovery. Should a whole region fail, it would take much
longer to wait for it to come back, or redeploy everything in a new region, than already having
the resources/services in said different region. Therefore, having services/resources span across
multiple region CAN increase SLA (decrease downtime) 3) No - SLAs are for services, not
subscriptions
upvoted 3 times
nExoR

yes, no, no
upvoted 2 times
justadult

https://docs.microsoft.com/en-us/azure/architecture/reliability/architect#complete-azure-
redundancy-tasks "If your application is deployed to a single region, and the region becomes
unavailable, your application will also be unavailable. This may be unacceptable under the terms
of your application's SLA. If so, consider deploying your application and its services across
multiple regions." So B is 'Yes'
upvoted 2 times
Shades

https://azure.microsoft.com/en-us/support/legal/sla/virtual-machines/v1_9/ For any Single
Instance Virtual Machine using Standard SSD Managed Disks for Operating System Disk and
Data Disks, we guarantee you will have Virtual Machine Connectivity of at least 99.5%. For any
Single Instance Virtual Machine using Standard HDD Managed Disks for Operating System Disks
and Data Disks, we guarantee you will have Virtual Machine Connectivity of at least 95%.
upvoted 3 times
hstorm

Answer is Correct... SLA can be increased by implementing multi-region deployment
https://docs.microsoft.com/en-us/azure/architecture/framework/resiliency/business-
metrics#slas-for-multiregion-deployments
upvoted 2 times
Which statement accurately describes the Modern Lifecycle Policy for Azure services?
• A. Microsoft provides mainstream support for a service for five years.

• B. Microsoft provides a minimum of 12 months‫ג‬€™ notice before ending support for a
service.
• C. After a service is made generally available, Microsoft provides support for the service
for a minimum of four years.
• D. When a service is retired, you can purchase extended support for the service for up to
five years.
Correct Answer: B
For products governed by the Modern Lifecycle Policy, Microsoft will provide a minimum
of 12 months' notification prior to ending support if no successor product or service is
offered ‫ג‬€" excluding free services or preview releases.
Reference:
https://support.microsoft.com/en-us/help/30881/modern-lifecycle-policy
neil1985_jy

Correct: For products governed by the Modern Lifecycle Policy, Microsoft will provide a
minimum of 12 months' notification prior to ending support if no successor product or service is
offered—excluding free services or preview releases.
upvoted 5 times
stoy123

Microsoft style.
upvoted 1 times
jfgonzalez

Correct!
upvoted 3 times
Shrek4u

Refer: https://docs.microsoft.com/en-us/lifecycle/policies/modern
upvoted 3 times
1Shandu
12 months ago
Correct!
upvoted 4 times
HOTSPOT -
You need to request that Microsoft increase a subscription quota limit for your company.
Which blade should you use from the Azure portal? To answer, select the appropriate
blade in the answer area.
Hot Area:
Correct Answer:
Request a standard quota increase from Help + support
Reference:
https://docs.microsoft.com/en-us/azure/azure-portal/supportability/per-vm-quota-
requests
levape

Help + support is not in the picture, is this the correct picture?
upvoted 22 times
toniiiy
1 week, 2 days ago

Help + Support is correct, and it should appear at the bottom of the screenshot.
upvoted 3 times
octapus

yeah, help + support is the answer.
upvoted 4 times
Olamiovaflow

Please we need update on the answer area for this question.
upvoted 18 times
jj44

Help + Support is the correct answer. Like a previous similar question, the screen snip is cut off.
upvoted 9 times
Franco11

Help and Support! Snipped Picture
upvoted 2 times
DeepMoon
2 weeks, 3 days ago

Actual exam question may only show this much just to test your knowledge and experience. If
then anyone who is familiar with the portal will also know you can click on the Dashboard and
still get to help and support.
upvoted 1 times
MichalGr
2 weeks, 6 days ago

Help + support [not visible on the screen] New support request Service and subscription limits
upvoted 2 times
Tshepuna
1 month ago
screen snip does not show the Help
upvoted 1 times
You can use Advisor recommendations in Azure to send email alerts when the cost of
the current billing period for an Azure subscription exceeds a specified limit.
• B. Access control (IAM)
• C. Budget alerts
• D. Compliance
Correct Answer: C
Budget alerts notify you when spending, based on usage or cost, reaches or exceeds
the amount defined in the alert condition of the budget. Cost Management budgets are
created using the Azure portal or the Azure Consumption API.
Reference:
https://docs.microsoft.com/en-us/azure/cost-management-billing/costs/cost-mgt-alerts-
monitor-usage-spending
codesilog

I am not a robot!
upvoted 73 times
Franco11
1 week, 3 days ago

Hehehe Nice one
upvoted 2 times
Maddy260695

:) I was here ... all the best... Cuties... :)
upvoted 21 times
Gerardo1971

Correct answer
upvoted 2 times
hlacoucou
4 weeks ago
upvoted 4 times
Nawaf77

Good luck, my exam is tomorrow we all have been here do not worry.
upvoted 7 times
[Removed]

I love the consistency in Azure...these are Cost alerts in the UI where you can create alerts for
your budgets under Cost management.
upvoted 3 times
mankom
Good luck guys :)
upvoted 2 times
Kostiantyn

Good Luck!
upvoted 1 times
Mhaikel

Good luck folks!
upvoted 1 times
MaxTo2021

Good luck!
upvoted 2 times
Ed_123

How many questions were not here as of Dec 2020 exam?
upvoted 4 times
Medi_19
5 months ago
Right answer :C ; PS : Good luck , I,m passing my exam in one hour :') .
upvoted 2 times
m2bass

Good luck! Was here and it helped greatly
upvoted 1 times
Raifur

Good luck everyone! Taking it today!~
upvoted 2 times
apphsw29

Bocca al lupo!
upvoted 3 times
CrazyLearner

writing tommorrow..hope this questions will help
upvoted 4 times
mshowlers

best wishes all
upvoted 1 times
HOTSPOT -
select No.
Hot Area:
Correct
Answer:
Reference:
https://azure.microsoft.com/en-us/support/legal/preview-supplemental-terms/
nickname_200
2 months ago
answers are correct
upvoted 2 times
Kayip
2 months ago
That a product is in generally available does not mean it can't be updated with new and exciting
features
upvoted 4 times
FedorFFF

Why NO answers here ?
upvoted 1 times
FabiZamora93
3 weeks, 2 days ago

When a service becomes generally available, Microsoft can still add new features. Think of it as
updates When you create Azure resources for a svc in public preview and then it becomes
generally available you can still maintain the resources you first put in public preview. Its not like
is going to be reset just bc it went to generally available. The whole idea of it is to test those
"previews" to introduce them on our daily resources Don't have the source but I see it more as
logical
upvoted 2 times
HOTSPOT -
select No.
Hot Area:
Correct
Answer:
Box 1: Yes -
With Azure ExpressRoute, all inbound data transfer is free of charge.
Box 2: No -
Inbound data traffic is free but outbound data traffic is not.
Box 3: Yes -
Reference:
https://azure.microsoft.com/en-us/pricing/details/expressroute/
SnakePlissken

Answer is correct! 1. Yes. You already use and pay ExpressRoute. They just ask if inbound data is
free of charge, which it is. 2. No. Outbound data is not free of charge. 3. Yes. Within same region
is free.
upvoted 13 times
garyhejia

yes,no,no
upvoted 7 times
johnyjohny1
1 month ago
Last one is yes, the documentation could not be clearer. https://azure.microsoft.com/en-
us/pricing/details/bandwidth/
upvoted 1 times
Lipseal

I passed exam (May 2021) :) I had the 2nd question but worded a little differently. When using
ExpressRoute, outbound data traffic from Azure to an on-prem network is free. y/n
upvoted 1 times
erwintje
1 week, 1 day ago

3 = Yes, Availability Zone has the region. Inter Region is something else which cost money. (1
july 2021 MS will chance it and they answer should be NO, since then it will cost money)
upvoted 1 times
Sam_ugo
1 month, 1 week ago

This question was definitely on the test
upvoted 3 times
MikaKatua
1 month, 1 week ago

Box 3 answer is Yes. Data transfer between Azure services located within the same region is
always free. But VNET Peering within the same region is not free!
https://azure.microsoft.com/en-us/pricing/details/virtual-network/
upvoted 1 times
Returner
2 months ago
Yes, No, Yes For point 3, it's in the FAQs section: https://azure.microsoft.com/en-
us/pricing/details/bandwidth/ "Is data transfer between Azure services located within the same
region charged?" - "No. For example, an Azure SQL database in the same region will not have
any additional data transfer costs."
upvoted 1 times
Boboshlap

From this weblink, Question 3 will be from July 2021 with answer NO: *Starting from July 1,
2021, Data transfer billing between Virtual machines across availability zones will begin. Please
see FAQ for additional details.
upvoted 4 times
SnakePlissken

And when you read the FAQ, you see: Q: Is data transfer between Azure services within the same
region charged? A: No. For example, an Azure SQL database in the same region will not have
any additional data transfer costs. The question was about Azure services, not Virtual Machines.
upvoted 2 times
vajeje

YES - https://azure.microsoft.com/en-us/pricing/details/expressroute/ NO - Outbound traffic
charged YES - https://azure.microsoft.com/en-us/pricing/details/bandwidth/
upvoted 1 times
zorkanz

number 3 says traffic for SERVICES between the same region : No. For example, an Azure SQL
database in the same region will not have any additional data transfer costs.
upvoted 1 times
mateo2121

1. N, ExpressRoute is not a free service 2. N, Outbound transfer is always charged 3. Y, No fees
between same region
upvoted 1 times
sinear
1: Y. Question is not about ExpressRoute product itself but inbound trafic. This one is free. All
inbound and outbound data transfer is free of charge. Users are charged a single fixed monthly
port fee (based on High Availability dual ports).
upvoted 2 times
J0J0

Inter-region has fees now
upvoted 2 times
J0J0

1.No, ExpressRoute needs to be paid 2.No 3.No,inter-region has fees
upvoted 1 times
puj

Y, Inbound data is for free https://azure.microsoft.com/en-us/pricing/details/expressroute/ N, N,
As mentioned: https://azure.microsoft.com/en-us/pricing/details/bandwidth/
upvoted 8 times
Dre_One
2 months ago
Ans is YNY. The link you post literally says "No. For example, an Azure SQL database in the same
region will not have any additional data transfer costs." when asked "Is data transfer between
Azure services located within the same region charged?"
upvoted 1 times
chocoloco

1-N2-N3-Y
upvoted 2 times
type_12
i agree
upvoted 1 times
Drouck

not agree for the first : the keypoint is the trafic of data, not the express route itself
upvoted 1 times
HOTSPOT -
select No.
Hot Area:
Correct
Answer:
Box 1: No -
The price of Azure storage varies by region. If you use the Azure storage pricing page,
you can select different regions and see how the price changes per region.
Box 2: No -
You are charged for read and write operations in general-purpose v2 storage accounts.
Box 3: No -
You would be charge for the read operations of the source storage account and write
operations in the destination storage account.
Reference:
https://docs.microsoft.com/en-us/azure/storage/common/storage-account-overview
https://azure.microsoft.com/en-gb/pricing/details/storage/blobs/
Ananas

Storage account billing You're billed for Azure Storage based on your storage account usage. All
objects in a storage account are billed together as a group. Storage costs are calculated
according to the following factors: Region refers to the geographical region in which your
account is based. Account type refers to the type of storage account you're using. Access tier
refers to the data usage pattern you've specified for your general-purpose v2 or Blob storage
account. Storage Capacity refers to how much of your storage account allotment you're using to
store data. Replication determines how many copies of your data are maintained at one time,
and in what locations. Transactions refer to all read and write operations to Azure Storage. Data
egress refers to any data transferred out of an Azure region. When the data in your storage
account is accessed by an application that isn't running in the same region, you're charged for
data egress.
upvoted 23 times
gelato

Inbound is free. Outbound is paid per GB. Storage rent is paid per GB/month. Storage read/write
operations are paid.
upvoted 19 times
bcih

Correct
upvoted 1 times
Cloudyuga
11 months ago
correct is no no no
upvoted 3 times
ManuB
1 year, 1 month ago

.....But I said, "No, no, no"
upvoted 14 times
Kirael

RIP Amy
upvoted 5 times
Fhanuti

last one is tricky since it mentioned different regions .. if it was same region it would be Yes .. all
answers here are NO NO NO
upvoted 8 times
whopp

I think point 2 is yes. Read and Write operations are not charged
upvoted 1 times
sbettani

The correct answer is NO https://docs.microsoft.com/en-us/azure/storage/common/storage-
account-upgrade?tabs=azure-portal
upvoted 8 times
HOTSPOT -
select No.
Hot Area:
Correct
Answer:
Box 1: Yes -
Microsoft guarantee at least 99.9% availability of the Azure Active Directory Premium
edition services. The services are considered available in the following scenarios:
✑ Users are able to login to the service, login to the Access Panel, access applications
on the Access Panel and reset passwords.
✑ IT administrators are able to create, read, write and delete entries in the directory or
provision or de-provision users to applications in the directory.
Box 2: No -
No SLA is provided for the Free tier of Azure Active Directory.
Box 3: Yes -
You can claim credit if the availability falls below the SLA. The amount of credit depends
on the availability. For example: You can claim 25% credit if the availability is less than
99.9%, 50% credit for less than 99% and 100% for less than 95% availability.
References:
https://azure.microsoft.com/en-gb/support/legal/sla/active-directory/v1_0/
DomPri
I would argue that if you need to claim for it not all Azure customers will receive the credit as
not all customers will claim.
upvoted 10 times
Harshul

Agreed
upvoted 1 times
flex2021
Most Recent 1 month ago

there is no SLA for free services so Q2 - NO
upvoted 1 times
Tomsss12345
1 month, 1 week ago

SLA has been raised https://azure.microsoft.com/en-gb/support/legal/sla/active-directory/v1_1/
upvoted 2 times
vajeje

Yes YES - They actually changed it: https://azure.microsoft.com/en-
us/support/legal/sla/summary/ yes
upvoted 2 times
Returner
2 months ago
From the link you provided, it is said "We guarantee at least 99.9% availability of the Azure
Active Directory BASIC and PREMIUM services. No SLA is provided for the FREE tier of Azure
Active Directory." So the answer to the second one is NO.
upvoted 4 times
sinear
The question is again vague... you need to enter a claim if performance is below SLA, it won't be
automatic. Si I would say NO to 3rd one.
upvoted 3 times
HOTSPOT -
select No.
Hot Area:
Correct
Answer:
Box 1: No -
Resource groups are logical containers for Azure resources. You do not pay for
resource groups.
Box 2: No -
Data ingress over a VPN is data ‫ג‬€˜coming in‫ג‬€™ to Azure over the VPN. You are not
charged data transfer costs for data ingress.
Box 3: Yes -
Data egress over a VPN is data ‫ג‬€˜going out‫ג‬€™ of Azure over the VPN. You are
charged for data egress.
Reference:
https://docs.microsoft.com/en-us/azure/azure-resource-manager/manage-resource-
groups-portal https://azure.microsoft.com/en-us/pricing/details/bandwidth/
hlacoucou
4 weeks ago
upvoted 1 times
puj
Correct. N,N,Y
upvoted 3 times
J0J0

No, Yes, Yes
upvoted 1 times
Bernal8

2) is NO. Outbound data is not free.
upvoted 3 times
Bernal8

My bad. 2) is YES, the question talks about inbound data therefore is YES. Jojo you're right, sorry
mate ;-)
upvoted 1 times
Bernal8

My bad again lol. You must read very carefully this question. In fact it talks about INBOUND
data, therefore it does NOT generate costs, therefore the correct answer is NO.
upvoted 5 times
HOTSPOT -
Hot Area:
Correct
Answer:
If the SLA for an Azure service is not met, you receive credits for that service and that
service only. The credits are deducted from your monthly bill for that service.
If you stopped using the service where the SLA was not met, your account would
remain in credit for that service. The credits would not be applied to any other services
that you may be using.
Service Credits apply only to fees paid for the particular Service, Service Resource, or
Service tier for which a Service Level has not been met. In cases where
Service Levels apply to individual Service Resources or to separate Service tiers,
Service Credits apply only to fees paid for the affected Service Resource or
Service tier, as applicable. The Service Credits awarded in any billing month for a
particular Service or Service Resource will not, under any circumstance, exceed your
monthly service fees for that Service or Service Resource, as applicable, in the billing
month.
Reference:
https://azure.microsoft.com/en-gb/support/legal/sla/analysis-services/v1_0/
Franco11
1 week, 3 days ago

You should Submit a Claim at the end of the next month. then microsoft will credit you Correct!
upvoted 2 times
SecaWa5997

Not entirely correct, you should claim your it, otherwise Microsoft will not credit you
upvoted 3 times
bcih
2 months ago
correct
upvoted 2 times
Tanvirwq

Answer is absolutely correct!
upvoted 2 times
Which task can you perform by using Azure Advisor?
• A. Integrate Active Directory and Azure Active Directory (Azure AD).

• B. Estimate the costs of an Azure solution.
• C. Confirm that Azure subscription security follows best practices.
• D. Evaluate which on-premises resources can be migrated to Azure.
Correct Answer: B
Reference:
https://blog.pragmaticworks.com/what-is-azure-advi-
sor#:~:text=Microsoft%20defines%20Azure%20Advisor%20as,solutions%20based%20
on%20that%20data
jay158

Answer should be C, Price estimation is provided by pricing calculator
upvoted 69 times
freisoncastro
7 months ago
Reference: https://docs.microsoft.com/en-us/azure/advisor/advisor-overview
upvoted 4 times
Rosenkohl

All those 10000 monitoring tools are close to the same. How the fuck are you supposed to
understand all the differences? So B is fine?
upvoted 40 times
johnyjohny1
1 month ago
Hmm no, how is AD even remotely connected to the question? The tasks mentioned clearly
cannot be done by Azure Advisor, except one: B
upvoted 1 times
Billybob0604

you re right about that Rosenkohl. It is all very confusing and way over the top
upvoted 7 times
SunilBudhwani

Azure Advisor is the right product option to better understand and optimize both its cloud
spend and its cloud security posture.
upvoted 1 times
M_Abuzaid
1 week ago
Sorry, I thought that the best option for the security and compliance insights and optimization
are in the Trusted Center, as well, Compliance Manager !!
upvoted 1 times
Gerardo1971
1 week, 6 days ago

Correct answer
upvoted 1 times
Ranoooosh
2 weeks ago
Correct answer is C. I've tried it.. I opened portal-> adviser -> security : it shows me this
message: "You are following all of our security recommendations for the selected subscriptions
and resources." Which is exactly what answer C says!
upvoted 4 times
Alexandersss
3 weeks ago
Correct Answer is C
upvoted 1 times
Pamban
3 weeks, 2 days ago

Answer should be B. which means given answer is correct. beacuse Azure advisor provides
recommendations only for Azure services, not for subscriptions. hence C is not an option. please
guys, comment here any arugments. we all are here to learn..
upvoted 3 times
guzmanjd2
1 month ago
Given answer is correct "Advisor shows the estimated cost savings for either recommended
action: resize or shut down. For resize, Advisor provides current and target SKU information."
https://docs.microsoft.com/en-in/azure/advisor/advisor-cost-recommendations
upvoted 2 times
Bernal8
1 month ago
For estimating costs, you have the Calculator which is a better answer, i'd choose C in this case.
upvoted 1 times
mparcelli1
1 month, 1 week ago

The answer is coorect (B).: Azure Advisor helps you optimize and reduce your overall Azure
spend by identifying idle and underutilized resources. You can get cost recommendations from
the Cost tab on the Advisor dashboard.
upvoted 2 times
J4U

I go with B as it provides cost recommendations. https://docs.microsoft.com/en-
us/azure/advisor/advisor-cost-recommendations
upvoted 2 times
adb_gm

https://docs.microsoft.com/en-us/azure/advisor/advisor-cost-recommendations Refer this, "
Advisor shows the estimated cost savings for either recommended action: resize or shut down.
For resize, Advisor provides current and target SKU information."
upvoted 1 times
Kostia_Tamara

Correct answer should be C, because here you can see that Advisor provides saving estimates,
but does not estimate cost of services: https://docs.microsoft.com/en-us/azure/advisor/advisor-
cost-recommendations
upvoted 1 times
jayjung

b and c...
upvoted 1 times
AvF
2 months ago
Page not found, Error 404
upvoted 2 times
vajeje

C - I checked in my tenant and the Advisor Provides best practices and also advice best practices
for your currently deployed resources. It does not show any pricing it only shows that you can
save money, for example, a vm which is never used during the night to enable auto shutdown.
upvoted 1 times
type_12

C confirmed
upvoted 3 times
HOTSPOT -
select No.
Hot Area:
Correct
Answer:
Box 1: No -
Azure Free Account gives you 12 months access to the most popular free services. It
also gives you a credit (150 GBP or 200 USD) to use on any Azure service for up to 30
days.
Box 2: Yes -
All free accounts expire after 12 months.
Box 3: No -
You can only create one free Azure account per Microsoft account.
Reference:
https://azure.microsoft.com/en-gb/free/
Shamoliza

First question should answer YES
upvoted 8 times
MounikaPrasad

First Answer is Yes. The Azure free account provides access to all Azure services and does not
block customers from building their ideas into production. The Azure free account includes
certain services—and certain amounts of those services—for free. To enable your production
scenarios, you may need to use resources beyond the free amounts. You will be billed for those
additional resources at pay-as-you-go rates. https://azure.microsoft.com/en-in/free/free-
account-faq/
upvoted 1 times
Caris

Guys first question is NO, because the question is if it's true that you can use only a subset. With
a Free account you can use all the acure resources not only a subset so the answer is NO
upvoted 1 times
rich2508
1 week, 1 day ago

1st Q: No Exclusions Azure credits may not be used to purchase Azure support plans, Azure
DevOps, Visual Studio subscriptions, Visual Studio App Center services, Express Route, third-
party branded products, products sold through the Azure Marketplace or products otherwise
licensed separately from Azure (for example, Microsoft Azure Active Directory Premium).
upvoted 1 times
Franco11
1 week, 1 day ago

Yeah i think too that the first one should be yes
upvoted 1 times
Kennxfc
2 weeks, 1 day ago

Answer given in the first box don't seem right. You can't actually use all azure resources when
you're on free account. Ans should have been YES
upvoted 2 times
guzmanjd2
1 month ago
First answer is "YES" https://azure.microsoft.com/en-in/offers/ms-azr-0044p/
upvoted 1 times
bcih
2 months ago
Correct is : Yes | Yes | No
upvoted 3 times
smgjAZ
Not all services are included in the free (or spending limit) offer https://azure.microsoft.com/en-
us/offers/ms-azr-0044p/ "Azure credits may not be used to purchase Azure support plans, Azure
DevOps, Visual Studio subscriptions, Visual Studio App Center services, Express Route, third-
party branded products, products sold through the Azure Marketplace, or products otherwise
licensed separately from Azure (for example, Microsoft Azure Active Directory Premium)."
upvoted 4 times
Rony
2 months ago
I agree, you can not purchase all azure services with Azure free....there is exclusions like you said
upvoted 1 times
Bernal8

All of you are right. This is a bad question... as it depends on the period of time we are talking,
the answer can be YES or NO :-(
upvoted 1 times
_amking
3 months ago
it says "your company uses an Azure free account", I want to believe the first month of the
account is gone. So 1st question should be "Yes"
upvoted 4 times
johnyjohny1
1 month ago
Hahaha where does it say "the first month of the account is gone"?
upvoted 1 times
DennisWitjes

Why is 1st question "No"? You are limited to a spending budget so you cannot buy the most
expensive tiers (Support Premier for example). So you cannot use all services. You can only use a
subset based on your free credit
upvoted 3 times
emi502

The question did not mention any time period.
upvoted 1 times
emi502

It is no because when you have a Free Azure account you are able to use all of the services up to
30 days. After those 30 days are done, then you will be limited to just the subsets.
upvoted 5 times
HOTSPOT -
select No.
Hot Area:
Correct
Answer:
Public Preview means that the service is in public beta and can be tried out by anyone
with an Azure subscription. Services in public preview are often offered at a discount
price.
Box 1: No -
Services in private preview can be viewed in the regular Azure portal. However, you
need to be signed up for the feature in private preview before you can view it.
Access to private preview features is usually by invitation only.
Box 2: Yes -
You can use services in public preview in production environments. However, you
should be aware that the service may have faults, is not subject to an SLA and may be
withdrawn without notice.
Box 3: No -
Public previews are excluded from SLAs and in some cases, no support is offered.
References:
https://www.neowin.net/news/several-more-azure-services-now-available-in-private-
public-preview/
mdstest

I guess you can use it in production but you take a risk since there is no SLA.
upvoted 28 times
Rooks
1 year, 1 month ago

It is definitely a big risk. What if they make drastic changes during this preview time , what if
they discover a huge security hole and if you are already getting used to this preview in prod
then that would be very concerning .. But one can definitely use preview in prod but shouldn’t
though..
upvoted 3 times
Rooks
1 year ago
More info with the link below ... https://azure.microsoft.com/en-ca/support/legal/preview-
supplemental-terms/
upvoted 2 times
foreverlearner
1) No - Only the preview that impact the UI are accessed from a different portal (not the
services) 2) Yes - It is absolutely highly recommended NOT to use them in production, but you
can if you want (question asks if you CAN, not SHOULD) 3) No - No SLA provided for public
preview (main reason why it's not recommended for production)
upvoted 23 times
Gerardo1971

Correct answer
upvoted 1 times
Ahmadrad

The platform is delivered over internet and developers can avoid operating systems, software
updates, storage and infrastructure. PaaS is especially suited for businesses that want custom
applications but also want to reduce cots and time spent through assistance with rapid
development and deployment.
upvoted 2 times
caklov

Basically they let you not to follow the best practices, open up the security holes and be non-
complaint in production environment. What's the point of all the complainces, security and
other BSs?
upvoted 1 times
Ankit776

Public preview – During this phase we allow any customer with the proper Azure AD license to
evaluate the new feature. Microsoft Customer Support Services will supply support services
during this phase, but normal service level agreements do not apply. For new features exposed
in the Azure AD Portal, customer can expect to see information banners in the user interface
that draw attention to the new experience available during the preview. By clicking on the
information banner customers then opt-in to the preview experience.
upvoted 1 times
AbhiYad
4 months ago
Public preview - its just for feedback and use by all people. SLA applicable only for GA editions.
upvoted 1 times
Santhip
4 months ago
Azure preview portal is different to azure portal. First answer is "yes"
upvoted 1 times
Massy
3 months ago
but the services in preview are also in the "normal" portal... the preview portal is only for the
preview of the portal, so the first answer is no.
upvoted 1 times
Asim81

Tricky question. SHOULD vs COULD I think they should frame the question so they can test
Azure Knowledge instead of logic.
upvoted 4 times
MrGarak1

Public Preview means that the service is in public beta and can be tried out by anyone with an
Azure subscription. Services in public preview are often offered at a discount price. Box 1: No
Services in private preview can be viewed in the regular Azure portal. However, you need to be
signed up for the feature in private preview before you can view it. Access to private preview
features is usually by invitation only. Box 2: Yes You can use services in public preview in
production environments. However, you should be aware that the service may have faults, is not
subject to an SLA and may be withdrawn without notice. Box 3: No Public previews are excluded
from SLAs and in some cases, no support is offered.
upvoted 9 times
happycoder
7 months ago
All NO
upvoted 2 times
CarolineCr

you can use production data in public preview - yours just not meant to do it.
upvoted 1 times
Asiddiqui

Question to answer first point is yes http://preview.portal.azure.com
upvoted 1 times
awssecuritynewbie

The SLA for the public preview is not covered ..
https://www.rmsource.com/blogsite/Pages/Microsoft-Azure---Public-Preview-Release-
Status.aspx
upvoted 1 times
awssecuritynewbie

It is correct you can use public preview for everything if it is PUBLIC Public Preview This means
that an Azure feature is available to all Azure customers for evaluation purposes. These previews
can be turned on through the preview features page as detailed below.
https://www.taygan.co/blog/2019/02/07/az-900-azure-fundamentals-exam-preparation
upvoted 1 times
rajivthute
9 months ago
Preview features are recommended only for ¨Testing Environmentänd not for ¨Production
Environment¨ as they could change significantly before Go Live. Once new features are available
in General Availability, they can be used for prodduction.
upvoted 2 times
ConaxLearn
9 months ago
Using Public Preview products in production: PROS: - Free - You get the chance to contribute
feedback to improve the product CONS: - Product may fail and impact your business - As you're
using it for free, there's no SLA so MS will not credit you if product impacts your business.
upvoted 2 times
Your company has 10 offices. You plan to generate several billing reports from the
Azure portal. Each report will contain the Azure resource utilization of each office.
Which Azure Resource Manager feature should you use before you generate the
reports?
• A. tags
• B. templates
• C. locks
• D. policies
Correct Answer: A
You can use resource tags to ‫ג‬€˜label‫ג‬€™ Azure resources. Tags are metadata
elements attached to resources. Tags consist of pairs of key/value strings. In this
question, we would tag each resource with a tag to identify each office. For example:
Location = Office1. When all Azure resources are tagged, you can generate reports to
list all resources based on the value of the tag. For example: All resources used by
Office1.
References:
https://docs.microsoft.com/en-us/azure/cloud-adoption-framework/decision-
guides/resource-tagging/
Kashh

After you apply tags, you can retrieve all the resources in your subscription with that tag name
and value. Tags enable you to retrieve related resources from different resource groups. This
approach is helpful when you need to organize resources for billing or management.
upvoted 33 times
MoSiyed

this came in the exam
upvoted 24 times
Gerardo1971

Correct answer
upvoted 1 times
MAJDON

Good luck guys
upvoted 3 times
panal

Correct
upvoted 2 times
d3s08
3 months ago
Correct here is Tags! Last one for me. GL everybody!
upvoted 2 times
Joker20

Good luck guys
upvoted 1 times
AbhiYad
4 months ago
You can use tags to group your billing data. For example, if you're running multiple VMs for
different organizations, use the tags to group usage by cost center. You can also use tags to
categorize costs by runtime environment, such as the billing usage for VMs running in the
production environment.
upvoted 2 times
Tundey

tag can be used for billing
upvoted 1 times
philippeu
6 months ago
#tags but can u also use templates or policies in which u apply or force to use tags, when
reports are generated ?
upvoted 1 times
Ipodcillo

Tengo un tio que tiene un primo que tiene un sobrino que le preguntaron eso. El reprobo.
upvoted 5 times
Samanouseke
1 month ago
Reported. Go tell you uncle that.
upvoted 2 times
rfelipem

Reported
upvoted 2 times
JJBarns

Useless comment, Ipodcillo.
upvoted 1 times
G37R34DY

Tags is correct
upvoted 1 times
dmadhup

Explanation: https://docs.microsoft.com/en-us/azure/azure-resource-
manager/management/tag-resources
upvoted 3 times
HOTSPOT -
select No.
Hot Area:
Correct
Answer:
Box 1: No -
An Azure free account comes with a ‫ג‬€˜basic‫ג‬€™ support plan, not a ‫ג‬€˜standard‫ג‬€™
support plan.
Box 2: Yes -
You can purchase the Professional Direct, Standard, and Developer support plans with
the Microsoft Customer Agreement. You can also purchase the
Professional and Standard support plans with the Enterprise Agreement.
Box 3: No -
Users with any type of Azure subscription (pay-as-you-go, Enterprise Agreement,
Microsoft Customer Agreement etc.) can get support from the MSDN forums.
References:
https://azure.microsoft.com/en-us/support/plans/
foreverlearner

1) No - you get Basic support 2) Yes - https://azure.microsoft.com/en-gb/support/plans/ - "You
can purchase the Professional Direct, Standard and Developer support plans with the Microsoft
Customer Agreement. [...] Enterprise Agreement (EA) customers can purchase Azure Standard,
ProDirect and Premier technical support through their Reseller. Developer Support is not
available through an Enterprise Agreement." So you can't purchase Premier with an MCA, you
would need an EA 3) No - any plan has access to it
upvoted 54 times
JShah

Response from Microsoft Sales Chat: Hey great to meet you , no you don't need the enterprise
agreement to get a premier support plan here is a link to the support plans .
upvoted 45 times
Rooks
1 year, 1 month ago

The Sales guy was wrong ( usually they are : - ) To have a premier support you need to have an
enterprise agreement and below is the snippet from a MS article on this .. To purchase Premier
support you should contact your Microsoft Account Manager. If you are not sure who to
contact, please submit a request through the Premier contact form. note : an account manager
is assigned when you have enterprise contract ..
upvoted 9 times
JerryW

It wasn't a Sales guy, it was a Sales chat BOT!
upvoted 11 times
Stevo_WPB1
1 year ago
https://azure.microsoft.com/en-us/support/plans shows basic/developer/standard/pro direct
levels and no reference to premier so trick question.
upvoted 1 times
Toox

Response for B) is No, Enterprise and Partners can purchase Premier support.
https://azure.microsoft.com/en-ca/support/plans/premier/ To understant the billing types : EA,
MCA, MPA, ... : https://docs.microsoft.com/en-us/azure/cost-management-billing/manage/view-
all-accounts#check-the-type-of-your-account
upvoted 1 times
Joe75
3 months ago
This should be No, No, and No. Premier Support (anyone can purchase)
https://azure.microsoft.com/en-ca/support/plans/premier/ . Premier support has two offerings:
for Enterprise and Partners. https://www.microsoft.com/en-us/msservices/support?rtc=1+while
upvoted 2 times
rlkbly

second question is no because you must purchase premier support also if you are a CSP,
without having an EA
upvoted 2 times
saksham987
5 months ago
support plan is out of syllabus for AZ-900
upvoted 1 times
badrmotayeb

the second question is NO based on this link https://azure.microsoft.com/en-
us/support/plans/premier/
upvoted 3 times
Sachin1990

i found it on udemy - no, no ,no
upvoted 4 times
318touring

Support knowledge is no longer in the exam syllabus - https://docs.microsoft.com/en-
us/learn/certifications/exams/az-900?wt.mc_id=learningredirect_certs-web-wwl
upvoted 3 times
Katbin

Yes, but the exam will be updated on September 15, 2020
upvoted 1 times
jarg2006

Updating was cancel.
upvoted 2 times
Galbraj5797

I see that 'Premier Support' no longer exists.........so I'm guessing this question might be re-
worded?
upvoted 3 times
triptimandal01

I believe with changes in support plans in Azure, this questions becomes invalid. Right now on
24Jun20 site https://azure.microsoft.com/en-in/support/plans/ shows 4 support plans - Basic,
Developer, Standard, ProfessionalDirect
upvoted 5 times
Sultanista

check this out - https://www.microsoft.com/en-us/industry/services/support There is a premium
support for Enterprise AND enterprise partners
upvoted 2 times
abrakadabra
11 months ago
Premier support plan is not listed in Azure support plans https://azure.microsoft.com/en-
us/support/plans/ How did it happen to be yes
upvoted 4 times
jistikeleather

you do not require an EA to purchase Premier
upvoted 2 times
Trainu2
1 year ago
According to this link, the premier plan is available for Enterprise customers and partners, so
doesn't that make the answer to question 2 "no" https://www.microsoft.com/en-
us/industry/services/support
upvoted 2 times
zula
1 year, 1 month ago

You can also purchase the Professional and Standard support plans with the Enterprise
Agreement.
upvoted 4 times
arasavelli

https://www.microsoft.com/en-us/industry/services/support?rtc=1
upvoted 2 times
Hamid

I found this: Enterprise Agreement (EA) customers can purchase Azure Standard, ProDirect and
Premier technical support through their Reseller. Developer Support is not available through an
Enterprise Agreement.
upvoted 2 times
If Microsoft plans to end support for an Azure service that does NOT have a successor
service, Microsoft will provide notification at least 12 months before.
• B. 6 months
• C. 90 days
• D. 30 days
Correct Answer: A
The Modern Lifecycle Policy covers products and services that are serviced and
supported continuously. For products governed by the Modern Lifecycle Policy,
Microsoft will provide a minimum of 12 months' notification prior to ending support if no
successor product or service is offered‫ג‬€"excluding free services or preview releases.
Reference:
https://support.microsoft.com/en-us/help/30881
mambax

All the best to your exam guys
upvoted 51 times
Fhanuti
passed today guys .. all question from here and few new ones :)
upvoted 16 times
MinionVII

Good luck everyone!
upvoted 2 times
Gerardo1971
1 week, 6 days ago

Correct answer
upvoted 1 times
Aldred
2 months ago
A, https://docs.microsoft.com/en-us/lifecycle/faq/modern-policy#how-is-the-modern-lifecycle-
policy-defined
upvoted 2 times
Bernal8

Correct!
upvoted 2 times
owireless

Microsoft will provide a minimum of 12 months notification prior to ending support if no
successor product or service is offered https://docs.microsoft.com/en-
us/lifecycle/policies/modern
upvoted 4 times
LahiruW
6 months ago
All the best to anyone taking the exam & thank you for all the previous & future wishes. I'll be
going through the exam tomorrow :)
upvoted 1 times
samcertificate

Good luck
upvoted 1 times
cocochichi

All the best for the exam
upvoted 1 times
Sosimin
8 months ago
all the best
upvoted 1 times
azy

All the best! have my exam in few hours :)
upvoted 1 times
sunny031982

I have exam day after tomorrow.. Thanks all for your valuable feedback in discussion tab..
upvoted 2 times
clifts
10 months ago
All the best guys
upvoted 1 times
Leimo

i will make exam today, good luck guys!
upvoted 4 times
Googler99

For products governed by the Modern Lifecycle Policy, Microsoft will provide a minimum of 12
months' notification prior to ending support if no successor product or service is offered—
excluding free services or preview releases
upvoted 3 times
mutantlt
1 year ago
Good luck everyone! taking mine in 20 min
upvoted 1 times
HOTSPOT -
select No.
Hot Area:
Correct
Answer:
Box 1: No -
You need to be an administrator of the billing account that has the subscription to be
able to transfer the subscription. This could be a Billing Administrator or
Global Administrator. A subscription owner can manage all resources and permissions
within the subscription but cannot transfer ownership of the subscription.
Box 2: Yes -
You can convert a free trial subscription to Pay-As-You-Go. This is common practice for
people who wish to continue using the Azure services when the free trial period expires.
Box 3: Yes -
You can remove the spending limit, but you can‫ג‬€™t increase or decrease it.
The spending limit in Azure prevents spending over your credit amount. All new
customers who sign up for an Azure free account or subscription types that include
credits over multiple months have the spending limit turned on by default. The spending
limit is equal to the amount of credit and it can‫ג‬€™t be changed. For example, if you
signed up for Azure free account, your spending limit is $200 and you can't change it to
$500. However, you can remove the spending limit. So, you either have no limit, or you
have a limit equal to the amount of credit.
Reference:
https://docs.microsoft.com/en-us/azure/billing/billing-add-change-azure-subscription-
administrator https://docs.microsoft.com/en-us/azure/billing/billing-upgrade-azure-
subscription https://docs.microsoft.com/en-us/azure/billing/billing-spending-limit
jprmartinho

Given answer is correct. - "Only the billing administrator of an account can transfer ownership of
a subscription." https://docs.microsoft.com/en-us/azure/cost-management-
billing/manage/billing-subscription-transfer
upvoted 7 times
Whitegoat
3 weeks, 4 days ago

what the difference between Quota and Spending limit , how to differentiate when the question
talk about them specially you can increase or decrease quota?
upvoted 1 times
puj

Correct
upvoted 2 times
_vii_

I suspect this question is missing an important statement that the company currently has a free
account. Quotes/limits can be changed by submitting a support ticket. However this is not an
option for a free account.
upvoted 1 times
cmccron
3 weeks, 4 days ago

It does in fact seem that spending limit cannot be changed https://docs.microsoft.com/en-
us/azure/cost-management-billing/manage/spending-limit
upvoted 1 times
AlexanderSaad
1 month ago
To make a user an administrator of an Azure subscription, assign them the Owner role at the
subscription scope. The Owner role gives the user full access to all resources in the subscription,
including the permission to grant access to others. To transfer a Microsoft Azure plan
subscription, you need to be an owner or contributor on the invoice section to which the
subscription is billed. https://docs.microsoft.com/en-us/azure/cost-management-
billing/manage/billing-subscription-transfer
upvoted 1 times
GuyJosenhans
1 month ago
Shouldn't the third question be NO? it is not fixed and can be changed.
upvoted 1 times
Jk84

I believe it to be YYY https://docs.microsoft.com/en-us/azure/cost-management-
billing/manage/billing-subscription-transfer#transfer-a-subscription-to-another-azure-ad-
tenant-account
upvoted 1 times
woodmanhu

Answer should be Yes - Yes -Yes. Question 1: An owner can transfer ownership of an Azure
subscription to others. the question doesn't ask to transfer billing ownership specifically.
upvoted 2 times
hf443
3 months ago
I don't think you are right on the first question. Keyword here is "Owner". There isn't any role in
AAD called owner but RBAC. Thus, from any RBAC role you can't transfer ownership of a
subscription. You have to do it from a role in AAD.
upvoted 4 times
HOTSPOT -
select No.
Hot Area:
Correct
Answer:
Box 1: Yes -
A reservation is where you commit to pay for a resource (for example a virtual machine)
for one or three years. This gives you a discounted price on the resource for the
reservation period.
Box 2: No -
There are other factors that influence the cost of a virtual machine such as the virtual
hard disks attached to the virtual machine. You could have multiple virtual machines
with the same ‫ג‬€˜size‫ג‬€™ (B2S in this case) but with different virtual hard disk
configurations.
Box 3: Yes -
When a virtual machine is stopped (deallocated), the virtual machine is
unloaded/dismounted from the physical server in Azure. In this state, you are not
charged for the virtual machine itself. However, you are still charged for the storage
costs of the virtual hard disks attached to the virtual machine.
If the virtual machine is stopped but not deallocated (this happens if you shut down the
virtual machine from the operating system of the virtual machine), the virtual machine is
still mounted on the physical server in Azure and you are charged for the virtual
machine itself as well as the storage costs. To ensure that a virtual machine is
‫ג‬€˜stopped (deallocated)‫ג‬€™, you need to stop the virtual machine in the Azure portal.
Reference:
https://azure.microsoft.com/en-us/reservations/
https://docs.microsoft.com/en-us/azure/virtual-machines/linux/b-series-burstable
https://blogs.technet.microsoft.com/uspartner_ts2team/2014/10/10/azure-virtual-
machines-stopping-versus-stopping-deallocating/
sinear

I don't agree with A. It's not because you pay a Reservation that you will necessarily spend less
than with "pay as u go". It all depends on your usage in final. So question is quite vague. If they
mean implicitely "for the same usage", then I agree with the answer.
upvoted 9 times
hercu

I think that you should take more time to study. The answer is correct as it is: Y-N-Y. "Azure
Reservations help you save money by committing to one-year or three-year plans for multiple
products. Committing allows you to get a discount on the resources you use. Reservations can
significantly reduce your resource costs by up to 72% from pay-as-you-go prices. Reservations
provide a billing discount and don't affect the runtime state of your resources. After you
purchase a reservation, the discount automatically applies to matching resources." Link:
https://docs.microsoft.com/en-us/azure/cost-management-billing/reservations/save-compute-
costs-reservations
upvoted 3 times
lemonpowah

In a scenario where you have an app that peaks two days a month, you start that specific VM
only for two days. Two days per month -> 24 days per year running that VM should be much
cheaper than paying for it for 1 year or 3 year plans. I agree the question is quite vague. Having
the VM run everyday would result in Reservation being much cheaper.
upvoted 4 times
syndicator

They probably want to hear Y-N-Y. Still it should be N-N-Y because in question 2 they also
assume that VMs can be temorarily powered down, so why not assume the same for question 1?
upvoted 1 times
hlacoucou
4 weeks ago
upvoted 2 times
panal

I thing N-N-Y
upvoted 2 times
panal

I thing Y-N-Y
upvoted 4 times
Your company has an Azure subscription that contains the following unused resources:
✑ 20 user accounts in Azure Active Directory (Azure AD)
✑ Five groups in Azure AD
✑ 10 public IP addresses
✑ 10 network interfaces
You need to reduce the Azure costs for the company.
Solution: You remove the unused network interfaces.
• A. Yes
• B. No
Correct Answer: B
You are not charged for unused network interfaces. Therefore, deleting unused network
interfaces will not reduce the Azure costs for the company.
Reference:
https://docs.microsoft.com/en-us/azure/advisor/advisor-cost-recommendations#reduce-
costs-by-deleting-or-reconfiguring-idle-virtual-network-gateways
DBoss

Answer is B, as Network Interface are not charged. See Azure pricing calculator
https://azure.microsoft.com/en-in/pricing/calculator/
upvoted 47 times
AcheshS

it doesnt have network interfaces in it?
upvoted 2 times
namco23

There should be a moderator to delete the leftover comments that do not help anyone other
than to confuse
upvoted 20 times
Gerardo1971

Correct answer
upvoted 1 times
panal
Correct
upvoted 2 times
H_S

NIC ALWAYS FREE
upvoted 1 times
H_S

NIK DIMA BLECH
upvoted 1 times
Azurite

got this question as radio button on Jan 24, 2021
upvoted 4 times
coder007

Advisor identifies public IP addresses that aren't associated with Azure resources like load
balancers and VMs. A nominal charge is associated with these public IP addresses. If you don't
plan to use them, you can save money by deleting them. https://docs.microsoft.com/en-
us/azure/advisor/advisor-cost-recommendations#delete-unassociated-public-ip-addresses-to-
save-money
upvoted 2 times
coder007

plan to use them, you can save money by deleting them https://docs.microsoft.com/en-
save-money
upvoted 1 times
Reddybo
5 months ago
"Advisor identifies public IP addresses that aren't associated with Azure resources like load
plan to use them, you can save money by deleting them."
upvoted 1 times
QualifiedExpert

The correct procedures is to remove all or delete them so you will not get cahrged.
upvoted 1 times
CloudNewbee

took the exam in Dec. this question was on the exam
upvoted 3 times
casper_aru
5 months ago
what's the answer?
upvoted 1 times
Cappu

This question appeared in the exam today 11/21/20
upvoted 1 times
SumitSingla

what's the correct answer?
upvoted 2 times
absshm
Yes, https://docs.microsoft.com/en-us/azure/advisor/advisor-cost-recommendations#reduce-
costs-by-deleting-or-reconfiguring-idle-virtual-network-
gateways:~:text=Advisor%20identifies%20virtual%20network%20gateways%20that,don't%20int
end%20to%20use%20them%20anymore.
upvoted 1 times
TereG

Answer is No. Refrence: https://azure.microsoft.com/en-us/pricing/details/virtual-network/ -->
"Azure Virtual Network is free of charge. Every subscription is allowed to create up to 50 virtual
networks across all regions."
upvoted 3 times
lehuspohus

They change the type of question, now is the "select one option that satistifes the requirement"
(recude the costs), so there is only one right answer in all this series (#116\117\118) and it will
be "Public addresses"
upvoted 4 times
Maddy_San

Azure Virtual Network is free of charge. Every subscription is allowed to create up to 50 virtual
networks across all regions. Public IP addresses, and reserved IP addresses used on services
inside a virtual network, are charged.
upvoted 3 times
Solution: You remove the unused public IP addresses.
• A. Yes
• B. No
Correct Answer: A
You are charged for public IP addresses. Therefore, deleting unused public IP
addresses will reduce the Azure costs.
Reference:
dmadhup

Advisor identifies public IP addresses that are not currently associated to Azure resources such
as Load Balancers or VMs. These public IP addresses come with a nominal charge. If you do not
plan to use them, deleting them can result in cost savings. https://docs.microsoft.com/en-
us/azure/advisor/advisor-cost-recommendations#reduce-costs-by-deleting-or-reconfiguring-
idle-virtual-network-gateways
upvoted 28 times
panal

Correct
upvoted 2 times
Azurite

I mean as a radio button
upvoted 1 times
Azurite

Got this AS-IS on Jan 24, 2021
upvoted 2 times
Ritz40

Yessss
upvoted 1 times
Gwak

Not attached Public IPs are not charged. Source from the support center. so the Answer is B
upvoted 1 times
absshm

Yes, https://docs.microsoft.com/en-us/azure/advisor/advisor-cost-recommendations#delete-
unassociated-public-ip-addresses-to-save-
money:~:text=Delete%20unassociated%20public%20IP%20addresses%20to,can%20save%20mo
ney%20by%20deleting%20them.
upvoted 3 times
Ebenezer

This is correct because in Azure, public IPs, reserved IPs used in a Virtual Network are charged.
upvoted 1 times
TereG

Answer is Yes. Reference: https://azure.microsoft.com/en-us/pricing/details/virtual-network/
"Public IP addresses, and reserved IP addresses used on services inside a virtual network, are
charged."
upvoted 1 times
cocochichi

of course, why not?
upvoted 1 times
jay158

you have to play for public IP at per hour rate https://azure.microsoft.com/en-
us/pricing/details/ip-addresses/ So answer is correct
upvoted 2 times
dbobspurfpoo

This question is duplicated in one of the previous pages and says that B is correct!?!?
upvoted 2 times
noussa
8 months ago
It's not duplicated, it's a series of questions for the same scenario. Read the question carefully
upvoted 2 times
pg_110989

plan to use them, you can save money by deleting them.
upvoted 1 times
Sudipta3009

But in Azure Calculator, I fwe select IP address (Static or Dynamic) the cost shown is 0$. Can
any1 please confirm this ?
upvoted 1 times
mikl

Public or private?
upvoted 1 times
gordzilla

"Delete unassociated public IP addresses to save money" https://docs.microsoft.com/en-
save-money
upvoted 1 times
saumenP
11 months ago
The ans is correct. Public IP costs money.
upvoted 2 times
validdumpplz

Yes, public IPs cost money.
upvoted 3 times
Solution: You remove the unused user accounts.
• A. Yes
• B. No
Correct Answer: B
You are not charged for user accounts. Therefore, deleting unused user accounts will
not reduce the Azure costs for the company.
Reference:
DBoss

Azure AD Free, doesn't cost anything
upvoted 7 times
rgalfaro

Not sure if I understand it correctly, but it looks like Premium versions of Azure AD are charged
per user: https://azure.microsoft.com/en-in/pricing/details/active-directory/ Now, the question
does not says what kind of AD subscription we are talking about, so I guess free, so answer
would be B. But if we are talking about P1 or P2, answer should be A.
upvoted 3 times
whoru

They're using AD groups which are only available in premium. So the answer is A.
upvoted 3 times
mikl

also if the users are unused? I guess - with no license attached?
upvoted 1 times
Fraz

I think the clue is in the fact that the accounts are unused, so the answer is B.
upvoted 6 times
Seppoin
Yes. Cost is for Monthly Active Users. Unused = No Cost
upvoted 4 times
Topically

I think this applies only to external users.
upvoted 1 times
mateo2121

Only free AD license has no fees per user. The rest is charged: Basic 1$ per user per month,
Premium P1 6$ per user per month, Premium P2 9$ per user per month.
https://www.agileit.com/news/understanding-azure-active-directory-licensing-free-basic-p1-p2/
https://azure.microsoft.com/en-us/pricing/details/active-
directory/?&ef_id=EAIaIQobChMIidK5z-
n_7gIVGEeRBR079AVCEAAYASAAEgLrB_D_BwE:G:s&OCID=AID2100098_SEM_EAIaIQobChMIidK
5z-n_7gIVGEeRBR079AVCEAAYASAAEgLrB_D_BwE:G:s&dclid=CKa2ttHp_-4CFSutmgod6SYLPg
upvoted 1 times
panal

Correct
upvoted 1 times
Azurite

Got this ? as a radio button instead of several questions on Jan 24, 2021
upvoted 1 times
whoru

The customer would save money by removing the unused AD accounts. ✑ 20 user accounts in
Azure Active Directory (Azure AD) ✑ Five groups in Azure AD They are using a paid version of
AD. The use of groups is only available in P1 and P2 at $6 per user, per month.
https://azure.microsoft.com/en-us/pricing/details/active-directory/
upvoted 3 times
Gwak

I guess A. They just said Azure AD. not mentioned P1 P2 or OFFICE 365 APPS
upvoted 1 times
PosPunk
8 months ago
You delete the account but you already have the license, don't you?
upvoted 1 times
Enoll

Yes but it doesn't mention a license here - just user account. If you have just an account that
doesn't have a license, you can keep it at no cost, deleting it will not save money (because it is
just an account, not a license). If it was delete unused license, then it will be YES, this will save
money.
upvoted 1 times
carecajo

B - answer should NO Customers are not charged for a MAU’s subsequent authentications or for
storing inactive users within that calendar month. https://azure.microsoft.com/it-
it/pricing/details/active-directory/external-identities/
upvoted 2 times
gelato

Based on the discussion the question should have stated what's in unused AD user accounts.
upvoted 1 times
Rooks
1 year, 1 month ago

As long as there’s no license assignment to those users then there’s no cost with those users ..
upvoted 5 times
farji
1 year, 1 month ago

#117, same question BUT answer is Yes
upvoted 1 times
Rooks
1 year ago
No, #117 you removed the unused IP Addresses...
upvoted 4 times
Ananas
1 year, 1 month ago

https://azure.microsoft.com/it-it/pricing/details/active-directory/ price is reported per user per
month, so I would think that you can save costs by eliminating unused user accounts
upvoted 2 times
gordzilla

I agree that billing is reduced, companies don't use free accounts.
upvoted 1 times
Ananas
1 year, 1 month ago

still it depends on your AD plan: some are free, while P1 and P2 version are paid per user per
month as previously said
upvoted 1 times
manojchavan

Azure Active Directory comes in four editions—Free, Office 365 apps edition, Premium P1, and
Premium P2. The Free edition is included with an Azure subscription. The P1 and P2 comes with
unlimited object limit. So B is correct answer.
upvoted 5 times
whopp

Basic version of Azure Active Directory costs $1 per user per month
upvoted 2 times
HOTSPOT -
How should you calculate the monthly uptime percentage? To answer, select the
Hot Area:
Correct
Answer:
"Maximum Available Minutes" is the total accumulated minutes during a billing month .
"Downtime" is the total accumulated minutes that are part of Maximum Available
Minutes where a system is unavailable.
"Monthly Uptime Percentage" for a service is calculated as Maximum Available Minutes
less Downtime divided by Maximum Available Minutes x 100.
Monthly Uptime Percentage is represented by the following formula:
Monthly Uptime % = (Maximum Available Minutes-Downtime) / Maximum Available
Minutes x 100.
Reference:
https://azure.microsoft.com/en-au/support/legal/sla/cloud-services/v1_0/
Ikrom

"Monthly Uptime Percentage" for Virtual Machines in Availability Zones is calculated as
Maximum Available Minutes less Downtime divided by Maximum Available Minutes in a billing
month for a given Microsoft Azure subscription. Monthly Uptime Percentage is represented by
the following formula: Monthly Uptime % = (Maximum Available Minutes – Downtime) /
Maximum Available Minutes X 100
upvoted 32 times
mytapun

exactly
upvoted 1 times
ljte38

I just passed the exam and this question was on it
upvoted 9 times
VTHAR

It's also on 29 Aug.
upvoted 4 times
Yeldi

This is pure logic.
upvoted 1 times
Mederbek

Percentage means multiplying by 100.
upvoted 2 times
absshm

Monthly Uptime % = (Maximum Available Minutes-Downtime) / Maximum Available Minutes
upvoted 2 times
Jebe

I love this question, this is the question where I don't have any idea! thanks a lot !
upvoted 3 times
Massy
3 months ago
It's only logic, I think that it's the simplest question ever...
upvoted 1 times
brandotiago

This was on the exam
upvoted 2 times
Sencaoco

Monthly Uptime % = (Maximum Available Minutes-Downtime) / Maximum Available Minutes
upvoted 4 times
snayler

Why is a math question in these exam questions? What azure specific knowledge does this
question show?
upvoted 5 times
Ltyy
12 months ago
you're not exactly doing math here. it's just a theoretical formula to compute for the uptime.
upvoted 3 times
RJ13RZA

This is a recent question they added, when i sat the exam last month it threw me off, the new AZ
2020 update has these annoying af
upvoted 3 times
arasavelli

"Monthly Uptime Percentage" for Virtual Machines is calculated as Maximum Available Minutes
less Downtime divided by Maximum Available Minutes in a billing month for a given Microsoft
Azure subscription. Monthly Uptime Percentage is represented by the following formula:
Monthly Uptime % = (Maximum Available Minutes-Downtime) / Maximum Available Minutes X
100 The following Service Levels and Service Credits are applicable to Customer’s use of Virtual
Machines in an Availability Set, or same Dedicated Host Group:
upvoted 2 times
ukiguy

Correct: https://azure.microsoft.com/en-us/support/legal/sla/virtual-machines/v1_8/
upvoted 4 times
HOTSPOT -
select No.
Hot Area:
Correct
Answer:
Box 1: No -
Resource groups are logical containers for Azure resources. You do not pay for
resource groups.
Box 2: No -
Data ingress over a VPN is data ‫ג‬€˜coming in‫ג‬€™ to Azure over the VPN. You are not
charged data transfer costs for data ingress.
Box 3: Yes -
Data egress over a VPN is data ‫ג‬€˜going out‫ג‬€™ of Azure over the VPN. You are
charged for data egress.
Reference:
https://docs.microsoft.com/en-us/azure/azure-resource-manager/manage-resource-
groups-portal https://azure.microsoft.com/en-us/pricing/details/bandwidth/
JasonB

The answer is false Inbound data transfers are free
upvoted 155 times
Neonlight8

Answer is No, No, Yes. Agreed, outbound traffic charged, inbound isn't so therefore Traffic
coming out of Azure is charged, but not the inbound traffic from onpremise to Azure
upvoted 30 times
lollo1234
7 months ago
Yes. First two answers have been swapped in the suggested answer. Here's the correct reference.
https://azure.microsoft.com/en-us/pricing/details/bandwidth/. Any data transfer into Azure is
free, from Azure is chargeable
upvoted 2 times
Dikshita
4 months ago
https://azure.microsoft.com/en-us/pricing/details/vpn-gateway/ Inbound Inter-virtual network
data transfers (i.e. data going into Azure data centers between two virtual networks)—Free
upvoted 1 times
kinnekejezus

upvoted 1 times
bantu_1

Inbound data transfer by public...This data is being transferred from In Premises to cloude and
VPN Gateway is used and that is not free
upvoted 5 times
sk1ppy
8 months ago
...but if you have the VPN gateway, it's there, charged by the hour. It won't create additional
costs. In other words, having the gateway as paid resource (charged by hour) isn't going to
make a difference if several GB-s downloaded or uploaded?
upvoted 2 times
whoru

Correct. https://azure.microsoft.com/en-us/pricing/details/vpn-gateway/
upvoted 2 times
whoru

NOT CORRECT! Ingress traffic is free, egress traffic is not.
upvoted 2 times
RTT1976

Yes, image shown in the suggested answer is incorrect. It's the opposite. Since it's about data
transfer over a VPN, I'd say the correct reference is: https://azure.microsoft.com/en-
us/pricing/details/vpn-gateway/
upvoted 26 times
Radoslavov

Inbound Inter-virtual network data transfers (i.e. data going into Azure data centers between
two virtual networks)—Free Outbound Inter-virtual network data transfers (i.e. data going out of
Azure data centers between two virtual networks) From Zone 1*— $0.035 per GB From Zone
2*— N/A per GB From Zone 3*— N/A per GB
upvoted 6 times
surendra5
1 year, 1 month ago

Are data transfers over the VPN connection charged separately? Yes. Data transfers between two
virtual networks are charged at the Inter-virtual network rates noted above. Other data transfers
over the VPN connections to your on-premises sites or the internet in general are charged
separately at the regular data transfer rate.
upvoted 4 times
SilkyS19

No- No - YES is the correct answer. For #2 it's NO - I just added the VPN in the pricing calculator
and checked the inbound and outbound price. It clearly stated that inbound data transfer is
FREE irrespective of GBs selected via VPN. However, The outbound data transfer amount
depends on the amount of GBs being transferred via VPN.
upvoted 1 times
hlacoucou
4 weeks ago
upvoted 2 times
Xadmin

Lets add to the confusion on this one and feel free to comment: Actually the answer is: No, No
and No. We agreed that ingress is free and that egress is charged. But in both cases the VPN-
Gateway is charged for being provisioned and available by the hour. So we're already paying for
bi-directional VPN traffic regardless of the traffic volume. IMO: Egress data to the data-center is
therefore is charged at zone rates without additional costs.
upvoted 1 times
Dineshvishe

The answer mentioned are correct .ie No, No and Yes. I got in the exam and scored 985 with
only one question incorrect. Hence this is 100% correct.
upvoted 5 times
mikl

Correct answers is : NO, NO, YES. Upload to Azure - free Download from Azure - charged Think
like this - if Microsoft wants us to use Azure, they dont charge you for moving your data to the
Cloud - but if you need it back, they will.
upvoted 8 times
Woodlandsu35

Isnt there an official statement by MS certification available it its NYN or NNY? I just want to
know, what to do while takin the test...thx to all
upvoted 1 times
abener
4 months ago
Outbound data transfer is charged and inbound data transfer is free.
upvoted 2 times
massnonn
4 months ago
Correct. answer is No, No, Yes The traffic from azure to on-primises is not free
upvoted 1 times
datts

I think answer should be: No, No, Yes. Incoming to azure is free Outgoing from azure cost
money
upvoted 2 times
Hustler01

Inbound is free Outbound is charged
upvoted 1 times
Ritz40

N;Y;Y.
upvoted 1 times
Kaushal123567

I am not able to view pages from 31 onwards. It is asking to get contributor access, any
alternative to it?
upvoted 1 times
Lilita

Yeah I had to get the contributor access.
upvoted 1 times
mkrishna39

NO , YES , YES Yes. Data transfers between two virtual networks are charged at the Inter-virtual
network rates noted above. Other data transfers over the VPN connections to your on-premises
sites or the internet in general are charged separately at the regular data transfer rate.
upvoted 1 times
HardikPathak

it should be No, No, Yes
upvoted 1 times
kjon16

No No Yes
upvoted 1 times
sanand3
5 months ago
Not sure of the last two answers here. Thought inbound data transfer is free and outbound is
charged
upvoted 1 times
A support plan solution that gives you best practice information, health status and
notifications, and 24/7 access to billing information at the lowest possible cost is a
Standard support plan.
• B. Developer
• C. Basic
• D. Premier
Correct Answer: C
A basic support plan provides:
✑ 24x7 access to billing and subscription support, online self-help, documentation,
whitepapers, and support forums
✑ Best practices: Access to full set of Azure Advisor recommendations
✑ Health Status and Notifications: Access to personalized Service Health Dashboard &
Health API
Reference:
karmaDude
Support options are eliminated from new exam since May 28th, 2020.
upvoted 29 times
crisgod
3 weeks, 5 days ago

what do you mean by "support options" ?
upvoted 1 times
dduque10

How do you know?
upvoted 3 times
L3o

Good to know! Thanks!
upvoted 1 times
David_warrior
11 months ago
Thank you for this update!
upvoted 1 times
success101

C is correct
upvoted 11 times
saransh89

In this question itself asking minimum cost plan. I will say that will be standard.
upvoted 1 times
Medi_19
5 months ago
The minimum could be 0$ :') .So it's a basic plan, my friend
upvoted 2 times
DodgyD

C basic is correct because Best Practise information is delivered by Azure Advisor which is
included in all Subscription types. 24x7 billing support is across the board - MS want their
money above all else Azure Service health is available to all subscriptions
upvoted 3 times
Lak43

thank you for the update
upvoted 1 times
HF_Lee

c basic
upvoted 1 times
baudrual

be careful, the question is about "support plan." The cheapest is basic and include billing :
"Billing and subscription management support" So C is correct
upvoted 1 times
A1207

do not see the underline
upvoted 1 times
jakapin997
Very trick question, some people think that the question is asking 24/7 support, but the
question is 24/7 billing access...
upvoted 1 times
Neonlight8

This question tried to trick you into thinking "24/7 access to technical support by email and
phone", but that's not the case therefore its Basic. So its C
upvoted 3 times
AjOG
10 months ago
Answer is right. They didn't say "Support"
upvoted 1 times
RSSR

Answer is A - Basic plan - 24*7 Support is not available now
upvoted 1 times
Shijugopinath

The point is billing information 24/7 is basic
upvoted 1 times
eastman79

but the comparison clearly states that Basic has no phone support 24/7..
upvoted 3 times
WeNt48

Question do not ask for 24/7 phone or email support, but 24/7 access to billing information.
This in fact comes in basic support plan.
upvoted 3 times
exam_tomorrow_123
11 months ago
Not according to the link.
upvoted 1 times
maena

correct
upvoted 1 times
Starlink
1 year ago
C- Basic
upvoted 5 times
tpascal
1 year, 1 month ago

it is C
upvoted 4 times
In which Azure support plans can you open a new support request?
• A. Premier and Professional Direct only

• B. Premier, Professional Direct, and Standard only
• C. Premier, Professional Direct, Standard, and Developer only
• D. Premier, Professional Direct, Standard, Developer, and Basic
Correct Answer: C
You can open support cases in the following plans: Premier, Professional Direct,
Standard, and Developer only.
You cannot open support cases in the Basic support plan.
Reference:
Kaavie

correct answer should be D. due to Basic plan only cannot create Technical support, others are
OK.
upvoted 34 times
Ramito2020

I have a basic Plan and I could create a new support Ticket.
upvoted 18 times
sbettani

No, correct answer is C, you can open a Technical support only with Premier, Professional Direct,
Standard, and Developer , read https://azure.microsoft.com/en-us/support/plans/
upvoted 22 times
Neffo
1 week, 6 days ago

The question does not say anything about "Technical Support".
upvoted 1 times
Rooks
1 year ago
This is a bit tricky.. The question is asking about Support Requests and not Technical Support or
Who can open cases. And the support plans article says the below Scope Available to all
Microsoft Azure accounts. That is including Basic. So answer could be all but not sure of what
they are actually asking..
upvoted 20 times
kilowd

It should be available to all support plans... https://azure.microsoft.com/en-us/support/create-
ticket/ Billing and subscription management support is available to all Azure customers. If you
have an Azure support plan or need help with billing or subscription management, sign in to
create and manage support requests.
upvoted 4 times
abhijna

answer is D right?
upvoted 7 times
ConaxLearn
9 months ago
Question does not say to open a technical support request. And the Azure support plan page
says "Ability to submit as many support tickets as you need" under Basic plan.
upvoted 6 times
Frankiey

only difference is response timeline differences
upvoted 1 times
dinesh_vijay

Support for billing is available. But a support case cannot be opened by Basic plan customers
upvoted 3 times
berend

Quote "can you open a new support request?" there's nothing in the question to state it's
technical. And even in the free account i can do a support request to upgrade. => D
upvoted 24 times
Franco11
Correct Answer https://azure.microsoft.com/en-us/support/plans/
upvoted 1 times
Gerardo1971
1 week, 6 days ago

Correct D: Basic -> Ability to submit as many support tickets as you need
upvoted 2 times
Kennxfc
2 weeks, 1 day ago

The answer should be D, the question says open a support request and with Basic you can do
that.
upvoted 2 times
QuwQuw
3 weeks, 4 days ago

Answer is C. If you read the link given, it mention provides "24/7 access to technical support by
email and phone after a SUPPORT REQUEST is submitted" for all plans, except Basic.
upvoted 2 times
VVR141
1 month, 1 week ago

Quote from MS docs under basic + all other plans "Ability to submit as many support tickets as
you need"
upvoted 2 times
NeaGica

D is the correct answer
upvoted 1 times
Robdog
Trick question. You cannot open "Technical Support" tickets but can open for other issues. Tried
it myself.
upvoted 1 times
BorisUK2000

D is correct. All support plans, including Basic, include "Ability to submit as many support tickets
as you need". https://azure.microsoft.com/en-gb/support/plans/
upvoted 6 times
[Removed]

All support plans enable you to create a support request, including Basic. Go ahead and create
one in the Health+Support blade. Also: https://azure.microsoft.com/en-
us/support/plans/?_ga=2.114530439.1679334631.1613933711-350568944.1613402241
Technical support is not available in Basic though, only for billing and subscription management.
upvoted 4 times
panal

Correct Answer is D
upvoted 3 times
Agrenade
3 months ago
you can create New Support Request with Basic Plan also. i tested it via Azure Free account.
upvoted 2 times
luppittegui

It's D. I have basic support and I can create support requests (for example, for asking about my
bill).
upvoted 4 times
vlada84

I tested now, and I am basic plan and I can create new support ticket. Answer is D :)
upvoted 2 times
compurmon

SUPPORT REQUEST = SUPPORT TICKETS, please read first line in this link
https://docs.microsoft.com/en-us/azure/azure-portal/supportability/how-to-create-azure-
support-request So, It might be D
upvoted 2 times
adilworth
6 months ago
I'm guessing this has changed over time, but as of right now (15/11/2020), on the support plans
page, you have the "Ability to submit as many support tickets as you need" with Basic, so answer
is D
upvoted 1 times
You can create an Azure support request from support.microsoft.com.
• B. the Azure portal
• C. the Knowledge Center
• D. the Security & Compliance admin center
Correct Answer: B
You can create an Azure support request from the Help and Support blade in the Azure
portal or from the context menu of an Azure resource in the Support +
Troubleshooting section.
Reference:
https://docs.microsoft.com/en-us/azure/azure-supportability/how-to-create-azure-
support-request
Himanshumittal500

B is the correct answer
upvoted 7 times
panal

correct
upvoted 2 times
DC_Azure
5 months ago
Help + Support in the Azure Portal. B is correct
upvoted 2 times
AbdulRehman121
6 months ago
Key is azure support request. B is correct
upvoted 2 times
imti3

Ans : B
upvoted 1 times
kilowd

You can create and manage requests in the Azure portal
upvoted 3 times
Cloudyuga
11 months ago
given answer is correct
upvoted 4 times
Ananas
1 year, 1 month ago

actually I went to support.microsoft.com and I have been able to create a support request. You
can use the Azure portal, thus you can also go to support.microsoft.com. Am I wrong?
upvoted 4 times
Ananas
1 year, 1 month ago

SORRY: you can create a support request, thus not an AZURE support request. Thus B is the
correct answer
upvoted 8 times
Solution: You remove the unused groups.
• A. Yes
• B. No
Correct Answer: B
You are not charged for Azure Active Directory Groups. Therefore, deleting unused
groups will not reduce your Azure costs.
Reference:
Look4you

The correct answer should be removing the 10 IP addresses
upvoted 10 times
RajaRao

Correct. Removal of unused groups will have no implications to the cost.
upvoted 9 times
Azurite

Got this ? as a radio button instead of several questions on Jan 24, 2021
upvoted 2 times
kjon16

B is the right choice
upvoted 1 times
AmerSerhan

To reduce costs, you should remove the 10 public IP addresses
upvoted 6 times
tpascal
1 year, 1 month ago

Yes, it is correct
upvoted 4 times
The Azure Standard support plan is the lowest cost option to receive 24x7 access to
support engineers by phone.
• B. Developer
• C. Basic
• D. Professional Direct
Correct Answer: A
The Basic support plan is free so is therefore the cheapest. The Developer support plan
is the cheapest paid-for support plan. The order of support plans in terms of cost
ranging from the cheapest to most expensive is: Basic, Developer, Standard,
Professional Direct, Premier.
However, 24/7 access to technical support by email and phone is only available for
Standard, Professional Direct, Premier plans.
Reference:
https://azure.microsoft.com/en-gb/support/plans/
Pniaq

Passed today with 955 score. Thank you Examtopics!
upvoted 17 times
warss

The Basic support plan does not have any technical support for engineers. Access to Support
Engineers via email or phone is available in the following support plans: Premier, Professional
Direct and standard. Reference: https://azure.microsoft.com/en-gb/support/plans/
upvoted 7 times
Kingini

U nailed it!
upvoted 1 times
MeetPatel

I guess B is the correct answer
upvoted 1 times
matija1
1 month, 1 week ago

Nope Developer is mail it says phone which Developer doesn't have
upvoted 1 times
nikonik

It should be Basic c) You've given a wrong answer.
upvoted 3 times
Medi_19
5 months ago
A Correct answer
upvoted 2 times
Okwy

My exam is tomorrow... I hope to smash it
upvoted 1 times
mosh

Good luck, mine is today
upvoted 1 times
Maatt

Taking my test tomorrow. Goodluck fellas!
upvoted 2 times
udibie
Thanks guys. I will write my exam tomorrow
upvoted 3 times
udibie

Update: I had 33 questions and passed. It only took 24 minutes and this was the only site I used
for practice exams. There were new questions, but i just check this site and the new questions
have been uploaded from the next question down. Kudos to the admin. Thanks
upvoted 6 times
prabh11

Good luck y'all!
upvoted 1 times
chewingice

Good luck everyone.
upvoted 1 times
bb90

Wow.. This was pretty long!
upvoted 1 times
demis

Good luck :)
upvoted 1 times
tthen1

Taking the test in 1 hour. Good luck to everyone!!
upvoted 1 times
tthen1

Update: I only had 31 questions and passed with 907. It only took 20 minutes and this was the
only site I used for practice exams. A lot of the questions were identicallllllll. Thank you
examtopics!!!!
upvoted 14 times
someth1ng

Gook luck everyone ^^
upvoted 1 times
Dymib
8 months ago
Goodluck everyone!
upvoted 1 times
Gusrpo
8 months ago
Thanks for everyone for all the help. I will take the exam next week.
upvoted 1 times
boby88123
8 months ago
read all 150 in 3 hours. i fail today. and i saw 80%+ question here, good luck tmr
upvoted 2 times
HOTSPOT -
Hot Area:
Correct
Answer:
Preview features are made available to you on the condition that you accept additional
terms which supplement the regular Azure terms. The supplemental terms state:
PREVIEWS ARE PROVIDED "AS-IS," "WITH ALL FAULTS," AND "AS AVAILABLE,"
AND ARE EXCLUDED FROM THE SERVICE LEVEL AGREEMENTS AND
LIMITED WARRANTY.
Reference:
https://azure.microsoft.com/en-gb/support/legal/preview-supplemental-terms/
nickname_200
2 months ago
correct answer😉
upvoted 1 times
vajeje
correct
upvoted 2 times
Bernal8

I agree. With the public preview, there is not any SLA associated.
upvoted 4 times
smcm
3 months ago
Hmmmmmmm
upvoted 1 times
What is guaranteed in an Azure Service Level Agreement (SLA) for virtual machines?
• A. uptime
• B. feature availability
• C. bandwidth
• D. performance
Correct Answer: A
The SLA for virtual machines guarantees ‫ג‬€˜uptime‫ג‬€™. The amount of uptime
guaranteed depends on factors such as whether the VMs are in an availability set or
availability zone if there is more than one VM, the distribution of the VMs if there is more
than one or the disk type if it is a single VM.
The SLA for Virtual Machines states:
✑ For all Virtual Machines that have two or more instances deployed across two or
more Availability Zones in the same Azure region, we guarantee you will have
Virtual Machine Connectivity to at least one instance at least 99.99% of the time.
✑ For all Virtual Machines that have two or more instances deployed in the same
Availability Set or in the same Dedicated Host Group, we guarantee you will have
Virtual Machine Connectivity to at least one instance at least 99.95% of the time.
✑ For any Single Instance Virtual Machine using Premium SSD or Ultra Disk for all
Operating System Disks and Data Disks, we guarantee you will have Virtual
Machine Connectivity of at least 99.9%.
Reference:
https://azure.microsoft.com/en-us/support/legal/sla/summary/
https://azure.microsoft.com/en-us/support/legal/sla/virtual-machines/v1_9/
t213
1 day, 21 hours ago

upvoted 2 times
Gerardo1971
1 week, 6 days ago

Correct answer
upvoted 2 times
konflikt
2 weeks, 6 days ago

Good luck :D
upvoted 1 times
coco5314
3 weeks, 3 days ago

This question was on the test
upvoted 3 times
SYK
3 weeks, 5 days ago

Good luck :D
upvoted 2 times
Penta1
4 weeks ago
Good luck
upvoted 1 times
rowanwally
1 month, 1 week ago

good luck!
upvoted 1 times
studyali114
1 month, 1 week ago

Good Luck Guys
upvoted 1 times
ouassimos99
1 month, 1 week ago

i have my exam tomorrow, hope i will get it . good luck guys
upvoted 2 times
JBPI
1 month, 1 week ago

Goodluck! :D
upvoted 1 times
TestingSh

Good luck guys!
upvoted 1 times
freeze159

Good luck mina-san
upvoted 1 times
hercu

Feature availability in Azure? - never heard of. The correct answer is Uptime.
upvoted 2 times
hercu

"Feature availability Some services or VM features are only available in certain regions, such as
specific VM sizes or storage types. There are also some global Azure services that do not require
you to select a particular region, such as Azure Active Directory, Traffic Manager, or Azure DNS.
To assist you in designing your application environment, you can check the availability of Azure
services across each region. You can also programmatically query the supported VM sizes and
restrictions in each region." Link: https://docs.microsoft.com/en-us/azure/virtual-
machines/regions Comment - For sure nothing related to SLA, but regions.
upvoted 1 times
Tas006

is B the correct answer here and not A ?
upvoted 1 times
sinear

It's correct: For each of its services - Cloud services, Virtual Machines, Virtual Networks and
Microsoft SQL Azure -Microsoft published a unique SLA. The Windows Azure service level
agreement guarantees that when you deploy two or more role instances in different fault and
upgrade domains, Microsoft will guarantee at least a 99.95% uptime.
https://www.erpsoftwareblog.com/2014/04/windows-azure-service-level-agreement-sla-what-
microsoft-users-need-to-know/
upvoted 4 times
Joe_H

B is correct, SLA for Virtual Machine, for other service A is correct from
https://azure.microsoft.com/en-us/support/legal/sla/summary, you can see the below: Cloud
Services and Virtual Machines For all Virtual Machines that have two or more instances deployed
in the same Availability Set, we guarantee you will have Virtual Machine Connectivity to at least
one instance at least 99.95% of the time. For any Single Instance Virtual Machine using premium
storage for all disks, we guarantee you will have Virtual Machine Connectivity of at least 99.9%.
upvoted 1 times
Rickert

SLA concerns Availability: "We guarantee at least 99.9% availability.."
upvoted 1 times
johnyjohny1
1 month ago
Availability means uptime. The wrong answer says "feature availability", which means nothing.
upvoted 1 times
HOTSPOT -
Hot Area:
Correct
Answer:
price.
Incorrect Answers:
✑ Services in private preview are available only to selected people who has signed up
to the private preview program.
✑ Services in development are not available to the public.
✑ Services provided under an Enterprise Agreement (EA) subscription are available
only to the subscription owner.
Reference:
https://www.neowin.net/news/several-more-azure-services-now-available-in-private-
public-preview/
KTrout

Just took this exam (3/5/2021).....these sets of questions are spot on. Out of my 41 questions, I
had about 35 from these sets. Great job and I appreciate all of the hard work to keep these
updated. The one's not in here reference Sentinel
upvoted 13 times
puj

Correct
upvoted 3 times
Your company plans to purchase an Azure subscription.
The company‫ג‬€™s support policy states that the Azure environment must provide an
option to access support engineers by phone or email.
You need to recommend which support plan meets the support policy requirement.
Solution: Recommend a Basic support plan.
• A. Yes
• B. No
Correct Answer: B
The Basic support plan does not have any technical support for engineers.
Access to Support Engineers via email or phone is available in the following support
plans: Premier, Professional Direct and standard.
Reference:
SnakePlissken

Question is deprecated. Should be removed.
upvoted 3 times
johnyjohny1
1 month ago
No it's not, have you actually checked the documentation? https://azure.microsoft.com/en-
gb/support/plans/
upvoted 2 times
Illumielle
3 weeks, 2 days ago

I think he means that support plans are not on the exam anymore.
upvoted 1 times
nocap

B is correct
upvoted 2 times
Solution: Recommend a Standard support plan.
• A. Yes
• B. No
Correct Answer: A
The Standard, Professional Direct, and Premier support plans have technical support
for engineers via email and phone.
Reference:
Franco11
1 week, 3 days ago

I am not a Robot
upvoted 1 times
Marouanoo
1 week, 5 days ago

should be No
upvoted 1 times
Dermondo
3 weeks, 2 days ago

According to https://azure.microsoft.com/en-gb/support/plans/ This answer should be NO
because Standard allows for contact with support only "Available during business hours by email
only." Question ask about contact via email and phone.
upvoted 1 times
Dermondo
3 weeks, 2 days ago

Never mind, email only is for Developer, not standard. I swap collumns
upvoted 1 times
SnakePlissken

upvoted 2 times
johnyjohny1
1 month ago
No it's not, have you actually checked the documentation? https://azure.microsoft.com/en-
gb/support/plans/
upvoted 1 times
Solution: Recommend a Premier support plan.
• A. Yes
• B. No
Correct Answer: A
Reference:
SnakePlissken

Question is deprecated. Should be removed. See Skills Measured:
https://query.prod.cms.rt.microsoft.com/cms/api/am/binary/RE3VwUY
upvoted 2 times
kriskan1

This can be done with standard also, why we need to go for expensive one.
upvoted 1 times
puj
Correct
upvoted 2 times
Your company plans to request an architectural review of an Azure environment from
Microsoft.
The company currently has a Basic support plan.
You need to recommend a new support plan for the company. The solution must
minimize costs.
Which support plan should you recommend?
• A. Premier
• B. Developer
• C. Professional Direct
• D. Standard
Correct Answer: A
The Premier support plan provides customer specific architectural support such as
design reviews, performance tuning, configuration and implementation assistance
delivered by Microsoft Azure technical specialists.
Reference:
RTT1976

Only with Premier it's possible to "request an architectural review of an Azure environment from
Microsoft." and this is what's being asked. https://azure.microsoft.com/en-us/support/plans/
Premier support plan --> Architecture Support "Customer specific architectural support such as
design reviews, performance tuning, configuration and implementation assistance delivered by
Microsoft Azure technical specialists." Professional Direct support plan it's not enough since it
only provides "Architectural guidance based on best practice delivered by ProDirect Delivery
Manager" Developer and Standard are not valid options.
upvoted 28 times
Stevo_WPB1

Premier is not included on that page anymore and professional direct is the top tier. has the
premier plan now obsolete?
upvoted 6 times
amityksharma

I have two account of my company. In one account it is coming but not in other and on page its
is not there .. but it is there like a GOD
upvoted 1 times
NetoMX

Thank you and agree with that, the tricky stuff it´s "architectural review"
upvoted 5 times
sbettani

Yes premiere is the most expensive but: Basic has no architecture support Developer has only
general guidance Standard has only general guidance Professional has Architectural guidance
based on best practice delivered by ProDirect Delivery Manager only premiere has architectural
support such as design reviews
upvoted 21 times
exam_tomorrow_123
11 months ago
Dev & standard do have guidance
upvoted 2 times
AwesomeSlide

It's Premier support. Link: https://www.microsoft.com/en-us/msservices/premier-support
upvoted 1 times
Gerardo1971
1 week, 6 days ago

Correct answer
upvoted 1 times
mikonnn
3 weeks ago
I cannot see any Premier option in the reference but the answer says it is premier...
upvoted 2 times
neoplasko
1 month ago
while the arch review is being requested and premier plans perhaps are enterprise plans now (as
they are not visible on plan comparison page), i think that was the ask. But about the cost
effective solution???? Enterprise plan will always be costlier than the others.. what say?
upvoted 1 times
SnakePlissken

Question is deprecated. Should be removed. See Skills Measured:
https://query.prod.cms.rt.microsoft.com/cms/api/am/binary/RE3VwUY
upvoted 2 times
Boboshlap

From the Exam Ref AZ900 book by Jim Cheshire at page 450 it is stated clearly that Premier
support is the correct answer. I would say it does not matter if this support plan was retired
meanwhile. You take an exam and some questions might be outdated, but that's life. I would go
with A.
upvoted 1 times
Odieperez
2 months ago
Answer: C - Pro Direct. This is the only level that provides a REVIEW of architecture vice
Guidance. It's also the most expensive support.
upvoted 3 times
NareshNK
2 months ago
As per the below link a "Developer plan" should provide the Architecture review at needed "low
cost". There was no mention of 24x7 support or Guidance. https://azure.microsoft.com/en-
gb/support/plans/
upvoted 1 times
nikonik

There is no premier plan any more. It should be Pro direct c) https://azure.microsoft.com/en-
gb/support/plans/
upvoted 1 times
Bigdss
2 months ago
https://www.microsoft.com/en-us/msservices/support What about this?
upvoted 1 times
Bodhizzle

Correct answer is C. The support plans have been updated and now only include - Basic -
Developer - Standard - Pro Direct
upvoted 3 times
smgjAZ

The question asks for an architectural REVIEW - that is not "general guidance". Hence the
cheapest option is ProDirect which includes specific "Guidance from a pool of ProDirect delivery
managers"
upvoted 3 times
mateo2121

The correct answer is D - Standard plan. Also Developer plan meets the requirements but only
for trial and non-production environments, so must be rejected for this question.
https://azure.microsoft.com/en-in/support/plans/
upvoted 2 times
type_12

Premier is correct
upvoted 1 times
GustFun

Premier is not available anymore. This question must be update. Standard is now I suppose the
correct answer if you are production env.
upvoted 3 times
JohnKim

the answer is D (Standard)
upvoted 1 times
Massy
3 months ago
In this moment Developer is the cheapest but it's only for trial and non production evironment,
so I think Standard is the most correct
upvoted 1 times
HOTSPOT -
select No.
Hot Area:
Correct
Answer:
Box 1: Yes -
Most services go to private preview then public preview before being released to
general availability.
The private preview is only available to certain Azure customers for evaluation
purposes. The public preview is available to all Azure customers.
Box 2: No -
Azure services in public preview can be managed using the regular management tools:
Azure Portal, Azure CLI and PowerShell.
Box 3: No -
Services in private or public preview are usually offered at reduced costs. However, the
costs increase, not decrease when the services are released to general availability.
jon007

YES-NO-NO
upvoted 11 times
foreverlearner

1) I couldn't quite find a statement from MS that it's true for MOST of the service:
https://azure.microsoft.com/en-gb/support/legal/preview-supplemental-terms/ However, that
seems to be the lifecycle https://www.techielass.com/service-lifecycle 2) No - Also from the
Portal (marked as "preview") 3) No - it might be free or cheaper during the preview, but
definitely not when GA
upvoted 9 times
foreverlearner
1 year ago
https://azure.microsoft.com/en-gb/updates/?status=inpreview There aren't many services that
has a link to sign up to the private review.. So I guess the first question is No on the MOST word
upvoted 1 times
smgjAZ

From M365, but I'd guess it's true for Azure as well https://docs.microsoft.com/en-
us/learn/modules/describe-service-life-cycle-microsoft-365/2-private-public-general-availability
A product, or services, lifecycle typically has three phases: Private preview Public preview General
Availability (GA)
upvoted 2 times
mierek
6 months ago
I had this question on today's exam ;)
upvoted 1 times
mikl

Was : YES, NO, NO correct then? :) And did you pass by studying in here?
upvoted 1 times
GCMan

YES, NO, NO
upvoted 3 times
GST03

https://azure.microsoft.com/en-in/support/legal/preview-supplemental-terms/. Go through this
link having topic azure active directory preview program where we have three types private
public and general availability ......
upvoted 1 times
Salmanm
1 year ago
It's No, No, No. Microsoft does not have to release Azure service in Private preview before being
introduced to public. It depends on what is the type of feedback Microsoft wants to get back for
a particular service.
upvoted 5 times
Gianlucag77
1 year ago
the keywork "most" let the answer be "yes"
upvoted 5 times
DeveshSolanki
1 year ago
Correct Answer is Y N N for point 1 : This does not have to be case for each service. It depends
on what is the type of feedback Microsoft wants to get back for a particular service.
upvoted 1 times
tpascal
1 year, 1 month ago

it is correct - Yes, No, No
upvoted 1 times
TL2ca
It's correct
upvoted 4 times
What is required to use Azure Cost Management?
• A. a Dev/Test subscription
• B. Software Assurance
• C. an Enterprise Agreement (EA)
• D. a pay-as-you-go subscription
Correct Answer: C
Azure customers with an Azure Enterprise Agreement (EA), Microsoft Customer
Agreement (MCA), or Microsoft Partner Agreement (MPA) can use Azure Cost
Management.
Cost management is the process of effectively planning and controlling costs involved in
your business. Cost management tasks are normally performed by finance,
management, and app teams. Azure Cost Management + Billing helps organizations
plan with cost in mind. It also helps to analyze costs effectively and take action to
optimize cloud spending.
Reference:
https://docs.microsoft.com/en-gb/azure/cost-management/overview-cost-mgt
wcarlin

Is this question right? I believe just need a subscription and not an Enterprise Agreement.
upvoted 35 times
lachrofe

"Cost Management includes all usage and purchases, including reservations and third-party
offerings for Enterprise Agreement (EA) accounts. **********Microsoft Customer Agreement
(MCA) accounts and individual subscriptions with pay-as-you-go rates only include usage from
Azure and Marketplace services. Support and other costs are not included.****** Costs are
estimated until an invoice is generated and do not factor in credits."
https://docs.microsoft.com/en-gb/azure/cost-management/understand-cost-mgt-data
upvoted 26 times
Gerardo1971
Correct C and D
upvoted 1 times
duuloj
2 weeks, 4 days ago

https://www.youtube.com/watch?v=iNgYu6MeTGg
upvoted 1 times
ceasar3000
3 weeks, 6 days ago

its free
upvoted 1 times
flex2021
1 month ago
its D - Enterprise Agreement ,Microsoft Customer Agreement & Microsoft Online Services
Program are supported. https://docs.microsoft.com/en-us/azure/cost-management-billing/cost-
management-billing-overview
upvoted 1 times
neoplasko
1 month ago
What is the correct answer? My answer is D
upvoted 1 times
Ilnaz
1 month, 1 week ago

Azure Cost Management is on by default for Microsoft Enterprise Agreement and Pay-As-You-
Go customers.
upvoted 1 times
bcih

Pay-as-You-Go subscription is enough. My answer is D
upvoted 8 times
Bernal8

Therefore, the correct answer is D?
upvoted 5 times
Jk84

free, https://docs.microsoft.com/en-gb/learn/modules/plan-manage-azure-costs/6-manage-
minimize-total-cost
upvoted 5 times
mateo2121

Great related link - so Azure Cost Management is free-of-charged: "Azure Cost Management +
Billing is a FREE service that helps you understand your Azure bill, manage your account and
subscriptions, monitor and control Azure spending, and optimize resource use."
upvoted 3 times
Veki
3 months ago
"Azure Cost Management now available for Azure Government Pay-As-You-Go subscriptions"
https://azure.microsoft.com/en-us/updates/acm-for-payg-azure-gov/
upvoted 4 times
Veki
3 months ago
so, not for all pay-as -you-go subscriptions, only Government
upvoted 2 times
c11

Updated information:: Cost management is "Always on by default and integrated in the Azure
portal".
upvoted 3 times
Blobster

Now a days its free
upvoted 3 times
QualifiedExpert

References: https://docs.microsoft.com/en-gb/azure/cost-management/overview-cost-mgt
upvoted 2 times
sreekarv

Azure Cost Management is available to all types of billing customers.. An Individual billing
account is created when you sign up for an Azure Free Account, account with pay-as-you-go
rates or if you are a Visual studio subscriber. Your account is treated as an Enterprise Billing
Account when you sign an enterprise agreement to use Azure. A billing account for a Microsoft
Customer Agreement is created when your organization works with a Microsoft representative
to sign a Microsoft Customer Agreement.
upvoted 3 times
myAz

A billing account is created when you sign up to use Azure. You use your billing account to
manage your invoices, payments, and track costs. You can have access to multiple billing
accounts. For example, you might have signed up for Azure for your personal projects. So, you
might have an individual Azure subscription with a billing account. You could also have access
through your organization's Enterprise Agreement or Microsoft Customer Agreement. For each
scenario, you would have a separate billing account https://docs.microsoft.com/en-
gb/azure/cost-management-billing/cost-management-billing-overview
upvoted 1 times
HOTSPOT -
Hot Area:
Correct
Answer:
A stopped (deallocated) VM is offline and not mounted on an Azure host server. Starting
a VM mounts the VM on a host server before the VM starts. As soon as the VM is
mounted, it becomes chargeable. For this reason, you are unable to start a VM after a
trial has expired.
Incorrect Answers:
✑ You are not charged for Azure Active Directory user accounts so you can continue to
create accounts.
✑ You can access data that is already stored in Azure.
✑ You can access the Azure Portal. You can also reactivate and upgrade the expired
subscription in the portal.
Salilgen

Answer is correct: https://azure.microsoft.com/en-us/free/free-account-faq/
upvoted 8 times
Jorex
3 months ago
The free account is only for 30 days, after that you have to upgrade your account to a pay-as-
you-go pricing, which is not a free account anymore, but for 12 months you can use the
resources for free.
upvoted 1 times
hf443
3 months ago
Yep, it is. Storage services are free for 12 months as per your link provided. Thank you
upvoted 2 times
Bernal8
Most Recent 1 month, 1 week ago

Honestly, i think that you can access to your personal data, but you defenitely CAN'T start any
VM if your account has expired.
upvoted 1 times
Tas006

Answer is, ''Access your data stored''
upvoted 2 times
johnyjohny1
1 month ago
No. You can access the data.
upvoted 1 times
WissoYassin

The correct answer should be : Access your data stored ...
upvoted 4 times
Jorex
3 months ago
Agree. https://azure.microsoft.com/en-gb/support/plans/ Your subscription and services are
disabled when your credit runs out or expires at the end of 30 days. To continue using Azure
services, you must upgrade your account.
upvoted 1 times
hf443

I thought the same, but you can't start an VM machine either if I am not wrong. I am doubtful
about these two.
upvoted 1 times
Solution: Recommend a Professional Direct support plan.
• A. Yes
• B. No
Correct Answer: A
The Basic support plan does not have any technical support for engineers.
The Developer support plan has only technical support for engineers via email.
Reference:
Gops

Considering cost, Standard would do the same
upvoted 10 times
Aladdin
1 year ago
Exactly answer would be wrong, you should always go for the cheapest and Standard is the case.
upvoted 1 times
examexpert

It did not say anything about cost
upvoted 4 times
Jhill777

Technically this is correct simply because it meets your goal and doesn't say anything about the
cost. Per https://azure.microsoft.com/en-us/support/plans/, developer option does have access
to email AND phone during business hours. Ergo, if question asked what is the cheapest,
Developer would be the answer.
upvoted 9 times
Jhill777
1 year ago
I read that wrong. Developer is only email. My bad. Standard would be cheapest and meet goal.
upvoted 3 times
SnakePlissken

upvoted 3 times
Ramito2020

Where to find Premier Plan ?
upvoted 1 times
sea_runner

https://azure.microsoft.com/en-us/support/plans/premier/
upvoted 1 times
keySEE
6 months ago
It does not exist anymore
upvoted 2 times
terry_man

Since requirement says "phone or email", the cheapest plan that fixes would be Developer,
which let support during business hours by email.
upvoted 1 times
priyank808
11 months ago
it is not mentioned in the question that you need to suggest the cheapest plan.
upvoted 1 times
tpascal
1 year, 1 month ago

Yes, Correct answer
upvoted 2 times
sbettani

D Is wrong because you can access the Azure portal even if you have not an Azure subscription,
but as soon as you try to do something Azure will ask the subscription.
upvoted 1 times
Your company has a Software Assurance agreement that includes Microsoft SQL
Server licenses.
You plan to deploy SQL Server on Azure virtual machines.
What should you do to minimize licensing costs for the deployment?
• A. Deallocate the virtual machines during off hours.

• B. Use Azure Hybrid Benefit.
• C. Configure Azure Cost Management budgets.
• D. Use Azure reservations.
Correct Answer: B
Azure Hybrid Benefit is a licensing benefit that helps you to significantly reduce the
costs of running your workloads in the cloud. It works by letting you use your on-
premises Software Assurance-enabled Windows Server and SQL Server licenses on
Azure.
Reference:
https://azure.microsoft.com/en-us/pricing/hybrid-benefit/
Yeldi
1 day, 18 hours ago

B is correct. With Hybrid Benefit you can keep using your existing licenses in the cloud.
upvoted 2 times
Quen
1 week, 3 days ago

B is correct.- see https://azure.microsoft.com/en-us/pricing/hybrid-benefit/ which is also the
suggested answer
upvoted 1 times
Your company has 10 departments.
The company plans to implement an Azure environment.
You need to ensure that each department can use a different payment option for the
Azure services it consumes.
What should you create for each department?
• A. a reservation
• B. a subscription
• C. a resource group
• D. a container instance
Correct Answer: B
There are different payment options in Azure including pay-as-you-go (PAYG),
Enterprise Agreement (EA), and Microsoft Customer Agreement (MCA) accounts.
Your Azure costs are ‫ג‬€˜per subscription‫ג‬€™. You are charged monthly for all
resources in a subscription. Therefore, to use different payment options per department,
you will need to create a separate subscription per department. You can create multiple
subscriptions in a single Azure Active Directory tenant.
Incorrect Answers:
A: A reservation is where you commit to a resource (for example a virtual machine) for
one or three years. This gives you a discounted price on the resource for the
reservation period. Reservations do not provide a way to use different payment options
per department.
C: A resource group is a logical container for Azure resources. You can view the total
cost of all the resources in a resource group. However, resource groups do not provide
a way to use different payment options per department.
D: A container instance is an Azure resource used to run an application. Container
instances do not provide a way to use different payment options per department.
Reference:
subscription
barchetta

subscription
upvoted 13 times
deepikac

Subscription is correct because subscription is used for billing purposes.
upvoted 9 times
Joker20

In Udemy same question with TAGS Answer: TAGS
upvoted 1 times
zaha08
4 months ago
i think is resource group
upvoted 1 times
Cloudyuga
11 months ago
best is to use B. Subscription
upvoted 2 times
JerryW

B. Subscription, my final answer
upvoted 3 times
Dark_Fox

subscription right one
upvoted 2 times
Himanshumittal500

Subscription is the right answer
upvoted 4 times
Kiookr

Subscription
upvoted 5 times
maithu

Resource group should be the correct option.
upvoted 2 times
examexpert
Key Phrase: use a different payment option
upvoted 6 times
Zorro20202

No. http://techtalk.cloud/azure-subscription-resource-groups-management-groups-and-how-
they-are-linked-to-azure-ad-tenant-and-some-common-faqs/
upvoted 8 times
HOTSPOT -
select No.
Hot Area:
Correct
Answer:
Box 1: Yes -
An Azure free account has a spending limit. This is currently 200 USD or 150 GBP.
Box 2: No -
Azure free account has a 5 GB blob storage limit and a 5 GB file storage limit.
Box 3: No -
Azure free account has a limit of 10 web, mobile or API apps
Reference:
https://azure.microsoft.com/en-us/free/
https://azure.microsoft.com/en-us/free/free-account-faq/
https://docs.microsoft.com/en-us/azure/billing/billing-avoid-charges-free-account
coco5314
1 week, 5 days ago

correct
upvoted 1 times
bcih

correct
upvoted 2 times
puj

Correct, https://azure.microsoft.com/en-us/free/free-account-faq/
upvoted 3 times
HOTSPOT -
select No.
Hot Area:
Correct
Answer:
Box 1: No -
Most services go to private preview then public preview before being released to
general availability. The private preview is only available to certain Azure customers for
evaluation purposes.
Box 2: Yes -
price.
Box 3: No -
An Azure service in general availability is available to all Azure customers, not just a
subset of the customers.
Reference:
https://azure-overview.com/Home/Faq
awron_durat

Correct.
upvoted 12 times
Hazemnz

No - "1. Private preview – during this phase we invite a few customers to take part in early
access to new concepts and features. " Yes - "2. Public preview – during this phase we allow any
customer with the proper Azure AD license to evaluate the new feature. " Maybe this question
can be evaluated as NO as it is stating "ny customer with the proper Azure AD license" needs to
be confirmed ! No - "3. Generally available (GA) – After the public preview is completed, the
feature is open for any licensed customer to use"
upvoted 8 times
Urpiano

IMHO second should be YES. How can I use a public preview if my license doesn't include a
requirement for the new feature? But it's not restricted to a selected customers group, so is
general available.
upvoted 1 times
Gerardo1971

Correct answer
upvoted 1 times
carca91
3 weeks, 4 days ago

No-Yes-No
upvoted 1 times
hlacoucou
4 weeks ago
upvoted 1 times
Azurite
Sorry the ? on the exam is for public preview
upvoted 1 times
Azurite

Got the first ? as a drop down on Jan 24, 2021
upvoted 1 times
mikl

Makes total sense. Private preview - sounds like kinda private to me. Public preview - sounds like
kinda public to me. GA = available for all Azure customers.
upvoted 4 times
kjon16

No-Yes-No is the correct answer
upvoted 1 times
kjon16

N,Y,N - is the correct answere
upvoted 1 times
Ebenezer

An Azure Service in General availability is released to all customers.
upvoted 1 times
imti3

Right No - "1. Private preview – during this phase we invite a few customers to take part in early
access to new concepts and features. " Yes - "2. Public preview – during this phase we allow any
customer with the proper Azure AD license to evaluate the new feature. " Maybe this question
can be evaluated as NO as it is stating "ny customer with the proper Azure AD license" needs to
be confirmed ! No - "3. Generally available (GA) – After the public preview is completed, the
feature is open for any licensed customer to use"
upvoted 2 times
Cloudyuga
11 months ago
GIVEN ANSWERS ARE RIGHT no yes no
upvoted 4 times
karmaDude

Correct
upvoted 2 times
Saschin

Question B should be NO. Only to seleceted users
upvoted 1 times
JerryW

The private preview is only available to certain Azure customers for evaluation purposes. The
public preview is available to all Azure customers.
upvoted 1 times
ManideepK

private preview is available for internal microsoft evaluation public preview means it is available
for public azure users for evaluation and then the service will become available and listed under
available services generally
upvoted 1 times
tpascal
1 year, 1 month ago
Correct
upvoted 2 times
Mukite
1 year, 1 month ago

correct
upvoted 2 times
HOTSPOT -
select No.
Hot Area:
Correct
Answer:
vr2021
4 days, 9 hours ago

Shouldn't the answer for 1 be 'Yes'? Isn't the price fixed?
upvoted 1 times
Yeldi
1 day, 18 hours ago

No, the catch phrase is 'conumption-based plan'.
upvoted 1 times
DeepMoon
2 weeks, 3 days ago

"With a consumption-based plan, you reduce overall costs by paying only for extra capacity
when it is required. " https://docs.microsoft.com/en-
us/azure/architecture/framework/cost/design-price I am not sure of this: "Extra capacity". You
pay for all capacity you use. Not just for any capacity in a consumption based plan. So the
answer should be B
upvoted 2 times
HOTSPOT -
select No.
Hot Area:
Correct
Answer:
Franco11
Highly Voted 1 week, 1 day ago

And Thats my Last Question for today Tomorrow Exam , Wish me luck
upvoted 14 times
sebastiantf

how did it go? ditto here today
upvoted 1 times
MinionVII

same here, Good luck!
upvoted 3 times
jeffhwang
Highly Voted 1 week, 5 days ago

I am not a robot
upvoted 8 times
Yeldi

Done. Need to review 48 questions out of 223, of which some I had answered partially wrong.
Not a bad score, nevertheless some topics like Azure Cubernetes, Azure Dedicated Host,
Defense in Depth framework, Conditional Access, RBAC, Cloud Adoption Framework, and
Windows Virtual Desktop, to name a few...
upvoted 1 times
Yeldi
1 day, 18 hours ago

some topics *where not touched* ...
upvoted 1 times
Yeldi
1 day, 18 hours ago

You can reserve data center capacity in a specific region, not a specific datacenter. Therefore the
answer must be "NO": https://docs.microsoft.com/en-us/azure/virtual-machines/prepay-
reserved-vm-instances?toc=/azure/cost-management-billing/reservations/toc.json
upvoted 1 times
syndicator
1 week, 5 days ago

Y-N-N Spot pricing might refer to a specific DC, not Reservation
upvoted 3 times
sandrarh
1 week, 5 days ago

I believe second answer is wrong. You reserve server capacity, but not in a specific data center
upvoted 1 times
Bursuc03
2 weeks, 1 day ago

Second answer is wrong. See: https://docs.microsoft.com/en-us/azure/cost-management-
billing/reservations/save-compute-costs-
reservations#:~:text=Azure%20Reservations%20help%20you%20save,on%20the%20resources%
20you%20use.&text=After%20you%20purchase%20a%20reservation,reservation%20up%20front
%20or%20monthly.
upvoted 1 times
zaheergenu
2 weeks, 1 day ago

correct
upvoted 1 times
guzmanjd2
2 weeks, 2 days ago

Second one should be no "The reservation discount can apply to VMs in the same series or you
can reserve data center capacity"--https://docs.microsoft.com/en-us/azure/cost-management-
billing/reservations/manage-reserved-vm-instance
upvoted 3 times
timtim589
2 weeks, 3 days ago

I'm off to the exam, good luck boys!
upvoted 7 times
reirei
4 days, 2 hours ago

girls too hahaha
upvoted 3 times

ExamTopics Az-900

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

ExamTopics Az-900

Uploaded by

Copyright:

Available Formats

- Expert Verified, Online, Free.

Custom View Settings

Highly Voted 1 year, 5 months ago

Highly Voted 1 year, 5 months ago

1 year, 5 months ago

1 year, 5 months ago

Most Recent 21 hours, 28 minutes ago

4 days, 13 hours ago

2 weeks, 5 days ago

2 weeks, 5 days ago

3 days, 5 hours ago

6 days, 15 hours ago

3 days, 5 hours ago

3 days, 5 hours ago

2 months, 3 weeks ago

2 months, 4 weeks ago

3 months, 3 weeks ago

2 months, 2 weeks ago

4 months, 1 week ago

4 months, 1 week ago

Highly Voted 1 year, 5 months ago

Highly Voted 1 year, 3 months ago

Most Recent 2 weeks, 5 days ago

1 month, 1 week ago

2 months, 2 weeks ago

2 months, 3 weeks ago

3 months, 4 weeks ago

5 months, 2 weeks ago

8 months, 1 week ago

8 months, 2 weeks ago

8 months, 3 weeks ago

2 months, 2 weeks ago

7 months, 3 weeks ago

8 months, 4 weeks ago

3 days, 12 hours ago

1 month, 2 weeks ago

1 month, 2 weeks ago

1 month, 3 weeks ago

2 months, 2 weeks ago

2 months, 3 weeks ago

3 months, 1 week ago

3 months, 1 week ago

3 months, 1 week ago

Highly Voted 1 year, 2 months ago

3 months, 2 weeks ago

Highly Voted 1 year, 7 months ago

Most Recent 2 weeks, 5 days ago

2 months, 3 weeks ago

3 months, 2 weeks ago

3 months, 3 weeks ago

3 weeks, 2 days ago

4 months, 1 week ago

5 months, 2 weeks ago

6 months, 3 weeks ago

7 months, 1 week ago

7 months, 3 weeks ago

9 months, 3 weeks ago

10 months, 1 week ago

10 months, 2 weeks ago

10 months, 3 weeks ago

Highly Voted 2 months, 3 weeks ago

1 month, 3 weeks ago

Most Recent 2 weeks ago