Microsoft Azure Fundamentals (Az-900) Pre Exam Assessment

In Azure, a resource group is a logical container that holds related resources. You can add or remove resources from a resource group at any time. This flexibility allows you to easily manage and organize your resources based on your requirements. Therefore, the statement is true.

A resource lock prevents the VM from being deleted. This means that any attempt to delete the VM will be blocked or denied. The lock ensures that the VM remains in place and cannot be removed, providing a level of protection and preventing accidental or unauthorized deletion of the virtual machine.

Azure PowerShell can indeed be run in a browser through the Azure Cloud Shell. The Azure Cloud Shell provides a browser-based command-line experience for managing Azure resources. It allows users to use PowerShell or other command-line tools directly from their browser without the need for any local installation or setup. This makes it convenient for users to manage their Azure resources from anywhere with an internet connection.

Moving a company's infrastructure to Azure using a public cloud deployment model allows the company to scale up as needed without requiring any capital expenditure. This means that the company can easily increase its resources and capacity without having to invest in expensive hardware or infrastructure. This flexibility allows for cost savings and the ability to adapt to changing business needs.

This statement accurately describes Azure PowerShell as it is a command-line tool that allows users to manage and automate Azure resources using scripts. With Azure PowerShell, users can write scripts to perform various tasks such as creating virtual machines, managing storage accounts, and deploying applications. It provides a powerful and efficient way to automate Azure management tasks, making it easier to manage and scale Azure resources.

The setup that represents a hybrid cloud model is an Azure web Application Program Interface (API) that connects to an on-premises SQL Server database at an on-premises private datacenter. This is because a hybrid cloud model involves the combination of public cloud services with on-premises infrastructure. In this setup, the API is hosted in the public cloud (Azure), but it connects to a SQL Server database that is located on-premises in a private datacenter. This allows for the integration of cloud services with existing on-premises infrastructure, providing the benefits of both environments.

The statement is true. The public cloud model allows users to deploy resources without the need to manage the underlying hardware. In a public cloud, the infrastructure is owned and managed by the cloud service provider, allowing clients to focus on their applications and data rather than worrying about hardware maintenance and management. This provides advantages such as scalability, flexibility, and cost-effectiveness, as resources can be easily provisioned and scaled up or down as needed without the need for upfront investment in hardware.

laaS (Infrastructure as a Service) is a cloud computing model that allows users to rent hardware resources such as virtual machines, servers, storage, and networking components. With laaS, users have control over the operating system (OS) and can install, configure, and manage it according to their needs. Therefore, the statement is true.

Locking a resource group as read-only prevents any modifications to the resources within the group. This means that all resources contained in the group will be locked and cannot be modified, deleted, or have any changes made to their configurations. Therefore, the statement is true.

When planning to migrate a public website to Azure, you must plan to pay monthly usage costs. This is the correct answer because when migrating a public website to Azure, you will need to consider the cost of hosting and maintaining the website on the Azure platform. Azure offers various pricing options based on the resources and services used, and these costs are typically billed on a monthly basis. Therefore, it is necessary to plan for and budget for these monthly usage costs when migrating a public website to Azure.

PaaS (Platform as a Service) is a cloud computing service that provides a platform for developing, running, and managing applications. It abstracts the underlying infrastructure, including the operating system, allowing users to focus solely on their applications. Therefore, PaaS does indeed allow you to manage applications without controlling the underlying OS.

Resources can interact with other resources in a different resource group because resource groups are logical containers that can hold resources from different services or regions. By placing resources in different resource groups, you can organize and manage them separately, but they can still communicate and interact with each other as needed. This allows for flexibility and scalability in managing and deploying resources within a cloud environment.

Azure Cosmos DB is the correct answer because it supports key-value and document data models, making it suitable for NoSQL databases. It is a globally distributed, multi-model database service provided by Microsoft Azure. It offers native support for NoSQL and allows developers to store and query data using different data models such as key-value, document, graph, and column-family. Azure SQL Data Warehouse and Azure SQL Database are relational database services, while SQL Server on Virtual Machines (VMs) is a traditional SQL Server deployment on Azure virtual machines.

The solution of deploying and configuring a Network Security Group (NSG) as the traffic filter meets the goal of filtering traffic between two subnets in an Azure deployment. NSGs allow you to define inbound and outbound security rules based on source and destination IP addresses, port numbers, and protocols. By configuring the NSG with the appropriate rules, you can effectively filter the traffic based on the specified criteria of source IP address and port number, destination IP address and port number, and TCP/IP protocol in use. Therefore, the given solution meets the goal.

This statement does not accurately describe Azure Powershell. Azure Powershell can be used to manage both Windows and Linux virtual machines (VMs) in Azure. Therefore, the correct answer is False.

SaaS (Software as a Service) is a cloud computing model where software is provided on a subscription basis. This means that users can access and use software applications over the internet, without the need to install or maintain the software locally. With SaaS, users can subscribe to software services and pay for them on a recurring basis, rather than purchasing and owning the software outright. Therefore, the statement "SaaS allows you to create software subscriptions" is true, as it accurately describes the subscription-based nature of SaaS.

The Total Cost of Ownership (TCO) Calculator should be used to determine if there will be any cost savings because of the move. This tool helps in evaluating the costs involved in running an on-premises datacenter compared to the costs of running the same workload in the cloud. It takes into account various factors such as hardware, software, networking, maintenance, and labor costs to provide an estimate of the overall cost of ownership. By using this calculator, the company can assess whether migrating to the cloud will result in cost savings or not.

Migrating to cloud services allows an organization to allocate infrastructure costs as an operational expense. This means that instead of purchasing and maintaining physical infrastructure, the organization pays a regular fee to the cloud service provider for using their infrastructure. This helps the organization to better plan and manage their budget as they can predict and control their operational expenses. Therefore, the underlined text correctly states that budgeting infrastructure costs as an operational expense is one of the benefits of migrating to cloud services.

Some Microsoft products require personal information in order to be used. This may include providing personal details such as name, email address, or phone number during the registration or installation process. Failure to provide this information may result in the product not being usable.

A resource group in Azure serves as a container for organizing and managing related Azure resources. It allows users to group resources such as virtual machines (VMs) and web apps together, making it easier to manage and organize these resources. By grouping resources in a resource group, users can easily manage and monitor them collectively, apply policies and permissions to the group as a whole, and track resource usage and costs. This helps in better organization, management, and control of Azure resources.

False. A resource group can contain resources from different regions. Resource groups are logical containers that help manage and organize resources in Azure. They provide a way to manage and apply policies, permissions, and tags to a group of resources. Resources within a resource group can be located in different regions, allowing for flexibility in resource deployment and management.

An availability zone refers to a distinct location within a region that contains one or more datacenters. It is designed to provide redundancy and fault tolerance. In this case, having two datacenters located in the same region would qualify as an availability zone because they are within the same geographical area and can provide backup and failover capabilities to ensure high availability of services.

The primary purpose for releasing an Azure feature in public preview is to obtain customer feedback. This allows Microsoft to gather insights and opinions from users, which can be used to improve and enhance the feature before its general availability. Customer feedback helps identify any issues or areas of improvement, ensuring a more stable and reliable release when it becomes generally available.

False. A Microsoft account can be created using any email account, not just a personal one. Microsoft allows users to create an account using email addresses from various providers such as Gmail, Yahoo, or Outlook.com. This provides flexibility and convenience for users who may prefer to use their existing email accounts.

Regions are always paired with other regions because Azure regions are organized into pairs called region pairs. These pairs are created for redundancy and disaster recovery purposes.

Regions contain one or more datacenters because each Azure region is made up of multiple datacenters. These datacenters are geographically dispersed within the region to ensure high availability and fault tolerance.

Regions specify the location of resources because when deploying resources in Azure, you can choose the specific region where you want those resources to be located. Each region has its own set of datacenters and infrastructure, allowing you to select the region that best suits your needs in terms of proximity, compliance requirements, and data sovereignty.

The given correct answer, "No change," is the best option because it accurately reflects the information provided in the original statement. The Azure Standard support plan provides 24x7 access to Support Engineers, which means that customers can reach out to them at any time, both via email and phone. Therefore, there is no need to make any changes to the statement.

Azure Knowledge Center is a publicly available search interface that allows users to locate and access online documentation. It serves as a repository of information where users can search for specific topics or issues related to Azure services and find relevant documentation to help them understand and resolve their queries or problems. It provides a centralized platform for users to easily access the required information and resources related to Azure.

No change.

The underlined text "configuring the SaaS solution" is the correct answer because when implementing a software as a service (SaaS) solution, one of the responsibilities is to configure high availability. This involves setting up the necessary infrastructure and settings to ensure that the SaaS solution is always accessible and operational for users. Defining scalability rules and installing the SaaS solution may be part of the overall implementation process, but specifically, configuring high availability is the responsibility mentioned in the question.

Azure Advanced Threat Protection (ATP) is the correct answer because it is specifically designed to identify and investigate suspicious user activities. ATP uses behavioral analytics and machine learning to detect abnormal behavior patterns and potential threats in real-time. It provides detailed information and insights into user activities, allowing security teams to investigate and respond to potential threats effectively. Key Vault is used for securely storing and managing cryptographic keys and secrets. Azure Security Center provides overall security management and monitoring for Azure resources. Azure Information Protection (AIP) is used for classifying and protecting sensitive information.

Application Insights is the correct answer because it is a feature of Azure Monitor that allows users to visually analyze telemetry data. It provides a set of tools and services for monitoring the performance, availability, and usage of web applications. With Application Insights, users can view and analyze telemetry data such as performance counters, request rates, and exception rates in a visual and intuitive way, making it easier to identify and troubleshoot issues in their applications.

File storage is the appropriate storage product solution for this scenario. File storage in Azure provides a fully managed file share that can be accessed from multiple virtual machines running different operating systems like Windows, Linux, and macOS. It allows for secure file sharing and can ensure that data is secure both at rest and in-transit. Disk storage is not suitable for sharing files across different operating systems, and blob storage is primarily used for storing unstructured data.

Microsoft may share personal information with vendors working on Microsoft's behalf. This means that Microsoft has the authority to disclose personal information to third-party vendors who are employed by Microsoft to provide services or perform tasks on its behalf. This can include sharing personal information for purposes such as customer support, data analysis, or marketing activities.

The correct answer is On-premises infrastructure and public cloud, Private and public cloud. These two options are valid hybrid cloud infrastructures because they involve a combination of both on-premises infrastructure and either a public or private cloud. This allows organizations to have the flexibility and scalability of the cloud while also maintaining control and security over certain data and applications on their own infrastructure.

False. The hybrid cloud model does not necessarily eliminate capital expenditure. In a hybrid cloud, organizations can leverage both on-premises infrastructure and public cloud services. While it may provide cost savings by allowing organizations to scale resources as needed and avoid upfront hardware costs, there can still be capital expenditure involved in setting up and maintaining the on-premises infrastructure.

Azure Policies should be used to ensure compliance with company standards and internal compliance goals. Azure Policies allow you to define and enforce rules and regulations for your Azure resources. By implementing Azure Policies, you can continuously evaluate the compliance of your resources and identify any non-compliant resources. This helps in maintaining the desired level of compliance and ensuring that all Azure resources adhere to company standards.

Authorization refers to the process of granting or denying access to certain resources or privileges based on the verification of someone's identity or eligibility. In this example, people presenting their birth certificate are proving their eligibility to receive government age-based benefits, which is a form of authorization. The other examples involve proving identity or accessing personal information, but they do not specifically relate to authorization in the same way as the birth certificate example.

Azure Information Protection (AIP) is the correct answer because it allows users to identify email messages that should be protected through encryption, identity, and authorization policies. AIP provides a comprehensive solution for classifying, labeling, and protecting sensitive information, ensuring that only authorized users can access and view the protected emails. It also enables organizations to track and control the usage of sensitive data, providing an added layer of security for email communication.

Azure Service Health is the correct answer because it is a component in Azure that provides information about planned maintenance and advisories such as deprecated offerings. It helps users stay informed about any potential disruptions or issues that may affect their Azure resources. Azure Security Center focuses on providing security recommendations and threat protection, Azure Advisor provides recommendations to optimize Azure resources, and Azure Monitor is used for monitoring and analyzing performance and availability of Azure resources.

The composite SLA value for the combination with the Azure SQL Database is 1: 99.94%, and the composite SLA value for the combination with the Azure Storage Queue is 2: 98.95%. This is because the composite SLA value is calculated by multiplying the SLA percentages of each individual component. In this case, for the combination with the Azure SQL Database, the SLA percentage is 99.99%, and for the combination with the Azure Storage Queue, the SLA percentage is 99%. Therefore, the composite SLA value for the combination with the Azure SQL Database is 99.99% * 99.95% = 99.94%, and the composite SLA value for the combination with the Azure Storage Queue is 99% * 99.95% = 98.95%.

NSG rules can be used to ensure that only the front-end VM is publicly accessible over port 80 by creating an inbound rule that allows incoming traffic on port 80 only for the IP address range of the internet. Additionally, NSG rules can be used to ensure that all three VMs are accessible over port 222 by creating an inbound rule that allows incoming traffic on port 222 for all IP addresses.

Azure Monitor is the correct answer because it provides autoscale functionality to add or remove resources based on the demand, ensuring cost optimization and maintaining optimal performance levels. Azure Advisor provides recommendations for optimizing resources but does not directly handle autoscaling. Azure Security Center focuses on security monitoring and threat protection. Azure Service Health provides information about service issues and events but does not have autoscale capabilities.

To improve the SLA and guarantee 99.99% availability while minimizing costs, installing an additional instance in a different Availability Zone in the same region is the best option. Availability Zones are physically separate data centers within a region, providing redundancy and fault tolerance. By deploying the VM in a different Availability Zone, the company can ensure high availability in case of a failure in one zone. This solution is cost-effective as it only requires one additional instance instead of multiple instances or instances in different regions.

This example best describes multi-factor authentication because it involves two factors: something you have (debit card) and something you know (PIN). By requiring both the physical card and the knowledge of the PIN, it adds an extra layer of security to access the account.

Mail Merge is a feature in Microsoft Word, not a core service of Microsoft Azure. Azure's core services include compute (virtual machines, containers), storage (databases, file storage), and networking (virtual networks, load balancers).