Microsoft Azure Fundamental AZ-900 Questions 51-75

Exam Preparation for AZ-900

Questions 51-75 (out of 185)

QUESTION 51
You have a virtual machine named VM1 that runs Windows Server 2016. VM1 is in the East US Azure region.
Which Azure service should you use from the Azure portal to view service failure notifications that can affect the
availability of VM1?
A. Azure Service Fabric
B. Azure Monitor
C. Azure virtual machines
D. Azure Advisor
Correct Answer: C
Section: Understand Core Azure Services
Explanation
Explanation/Reference:
Explanation:
In the Azure virtual machines page in the Azure portal, there is a named Maintenance Status. This column will
display service issues that could affect your virtual machine. A service failure is rare but host server
maintenance that could affect your virtual machines is more common.
Azure periodically updates its platform to improve the reliability, performance, and security of the host
infrastructure for virtual machines. The purpose of these updates ranges from patching software components in
the hosting environment to upgrading networking components or decommissioning hardware.
References:
https://docs.microsoft.com/en-us/azure/virtual-machines/maintenance-and-updates
QUESTION 52
Note: This question is part of a series of questions that present the same scenario. Each question in
the series contains a unique solution that might meet the stated goals. Some question sets might have
more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these
questions will not appear in the review screen.
An Azure administrator plans to run a PowerShell script that creates Azure resources.
You need to recommend which computer configuration to use to run the script.
Solution: Run the script from a computer that runs Linux and has the Azure CLI tools installed.
Does this meet the goal?
A. Yes
B. No
Correct Answer: B
Section: Understand Core Azure Services
Explanation
Explanation/Reference:
Explanation:
A PowerShell script is a file that contains PowerShell cmdlets and code. A PowerShell script needs to be run in
PowerShell.
PowerShell can now be installed on Linux. However, the question states that the computer has Azure CLI tools,
not PowerShell installed. Therefore, this solution does not meet the goal.
References:
https://docs.microsoft.com/en-us/powershell/scripting/components/ise/how-to-write-and-run-scripts-in-thewindows-powershell-ise?view=powershell-6
QUESTION 53
Note: This question is part of a series of questions that present the same scenario. Each question in
the series contains a unique solution that might meet the stated goals. Some question sets might have
more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these
questions will not appear in the review screen.
An Azure administrator plans to run a PowerShell script that creates Azure resources.
You need to recommend which computer configuration to use to run the script.
Solution: Run the script from a computer that runs Chrome OS and uses Azure Cloud Shell.
Does this meet the goal?
A. Yes
B. No
Correct Answer: A
Section: Understand Core Azure Services
Explanation
Explanation/Reference:
Explanation:
A PowerShell script is a file that contains PowerShell cmdlets and code. A PowerShell script needs to be run in
PowerShell.
With the Azure Cloud Shell, you can run PowerShell cmdlets and scripts in a Web browser. You log in to the
Azure Portal and select the Azure Cloud Shell option. This will open a PowerShell session in the Web browser.
The Azure Cloud Shell has the necessary Azure PowerShell module installed.
Note: to run a PowerShell script in the Azure Cloud Shell, you need to change to the directory where the
PowerShell script is stored.
References:
https://docs.microsoft.com/en-us/azure/cloud-shell/quickstart-powershell
QUESTION 54
Note: This question is part of a series of questions that present the same scenario. Each question in
the series contains a unique solution that might meet the stated goals. Some question sets might have
more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these
questions will not appear in the review screen.
An Azure administrator plans to run a PowerShell script that creates Azure resources.
You need to recommend which computer configuration to use to run the script.
Solution: Run the script from a computer that runs macOS and has PowerShell Core 6.0 installed.
Does this meet the goal?
A. Yes
B. No
Correct Answer: A
Section: Understand Core Azure Services
Explanation
Explanation/Reference:
Explanation:
A PowerShell script is a file that contains PowerShell cmdlets and code. A PowerShell script needs to be run in
PowerShell.
In this question, the computer has PowerShell Core 6.0 installed. Therefore, this solution does meet the goal.
Note: To create Azure resources using PowerShell, you would need to import the Azure PowerShell module
which includes the PowerShell cmdlets required to create the resources.
References:
https://docs.microsoft.com/en-us/powershell/scripting/components/ise/how-to-write-and-run-scripts-in-thewindows-powershell-ise?view=powershell-6
QUESTION 55
You have an Azure environment that contains 10 virtual networks and 100 virtual machines.
You need to limit the amount of inbound traffic to all the Azure virtual networks.
What should you create?
A. one application security group (ASG)
B. 10 virtual network gateways
C. 10 Azure ExpressRoute circuits
D. one Azure firewall
Correct Answer: D
Section: Understand Core Azure Services
Explanation
Explanation/Reference:
Explanation:
You can restrict traffic to multiple virtual networks with a single Azure firewall.
Azure Firewall is a managed, cloud-based network security service that protects your Azure Virtual Network
resources. It’s a fully stateful firewall as a service with built-in high availability and unrestricted cloud scalability.
You can centrally create, enforce, and log application and network connectivity policies across subscriptions
and virtual networks. Azure Firewall uses a static public IP address for your virtual network resources allowing
outside firewalls to identify traffic originating from your virtual network.
References:
https://docs.microsoft.com/en-us/azure/firewall/overview
QUESTION 56
HOTSPOT
You need to view a list of planned maintenance events that can affect the availability of an Azure subscription.
Which blade should you use from the Azure portal? To answer, select the appropriate blade in the answer
area.
Hot Area:

Correct Answer:

Section: Understand Core Azure Services
Explanation
Explanation/Reference:
Explanation:
On the Help and Support blade, there is a Service Health option. If you click Service Health, a new blade
opens. The Service Health blade contains the Planned Maintenance link which opens a blade where you can
view a list of planned maintenance events that can affect the availability of an Azure subscription.
QUESTION 57
DRAG DROP
Match the Azure service to the correct definition.
Instructions: To answer, drag the appropriate Azure service from the column on the left to its description on the
right. Each service may be used once, more than once, or not at all.
NOTE: Each correct match is worth one point.
Select and Place:

Correct Answer:

Section: Understand Core Azure Services
Explanation
Explanation/Reference:
Explanation:
Box 1: Azure DevOps.
Azure DevOps is Microsoft’s primary software development and deployment platform.
DevOps influences the application lifecycle throughout its plan, develop, deliver and operate phases.
Box 2: Azure Advisor.
Advisor is a personalized cloud consultant that helps you follow best practices to optimize your Azure
deployments. It analyzes your resource configuration and usage telemetry and then recommends solutions that
can help you improve the cost effectiveness, performance, high availability, and security of your Azure
resources.
Box 3: Azure Cognitive Services.
Azure Cognitive Services are APIs, SDKs, and services available to help developers build intelligent
applications without having direct AI or data science skills or knowledge. Azure Cognitive Services enable
developers to easily add cognitive features into their applications. The goal of Azure Cognitive Services is to
help developers create applications that can see, hear, speak, understand, and even begin to reason. The
catalog of services within Azure Cognitive Services can be categorized into five main pillars – Vision, Speech,
Language, Web Search, and Decision.
Box 4. Azure Application Insights.
Azure Application Insights detects and diagnoses anomalies in web apps.
Application Insights, a feature of Azure Monitor, is an extensible Application Performance Management (APM)
service for developers and DevOps professionals. Use it to monitor your live applications. It will automatically
detect performance anomalies, and includes powerful analytics tools to help you diagnose issues and to
understand what users actually do with your app.
References:
https://docs.microsoft.com/en-us/azure/azure-monitor/app/app-insights-overview
https://azure.microsoft.com/en-gb/overview/what-is-devops/
https://docs.microsoft.com/en-us/azure/advisor/advisor-overview
https://docs.microsoft.com/en-us/azure/cognitive-services/welcome
QUESTION 58
You have an Azure environment that contains multiple Azure virtual machines.
You plan to implement a solution that enables the client computers on your on-premises network to
communicate to the Azure virtual machines.
You need to recommend which Azure resources must be created for the planned solution.
Which two Azure resources should you include in the recommendation? Each correct answer presents part of
the solution.
NOTE: Each correct selection is worth one point.
A. a virtual network gateway
B. a load balancer
C. an application gateway
D. a virtual network
E. a gateway subnet
Correct Answer: AE
Section: Understand Core Azure Services
Explanation
Explanation/Reference:
Explanation:
To implement a solution that enables the client computers on your on-premises network to communicate to the
Azure virtual machines, you need to configure a VPN (Virtual Private Network) to connect the on-premises
network to the Azure virtual network.
The Azure VPN device is known as a Virtual Network Gateway. The virtual network gateway needs to be
located in a dedicated subnet in the Azure virtual network. This dedicated subnet is known as a gateway
subnet and must be named ‘GatewaySubnet’.
Note: a virtual network (answer D) is also required. However, as we already have virtual machines deployed in
a Azure, we can assume that the virtual network is already in place.
References:
https://docs.microsoft.com/en-us/office365/enterprise/connect-an-on-premises-network-to-a-microsoft-azurevirtual-network
QUESTION 59
DRAG DROP
Match the Azure service to the correct description.
Instructions: To answer, drag the appropriate Azure service from the column on the left to its description on the
right. Each service may be used once, more than once, or not at all.
NOTE: Each correct match is worth one point.
Select and Place:

Correct Answer:

Section: Understand Core Azure Services
Explanation
Explanation/Reference:
Explanation:
Box 1: Azure SQL Database
SQL Server is a relational database service. Azure SQL Database is a managed SQL Server Database in
Azure. The SQL Server is managed by Microsoft; you just have access to the database.
Box 2: Azure SQL Data Warehouse
Azure SQL Data Warehouse (SQL DW) is a cloud-based Platform-as-a-Service (PaaS) offering from Microsoft.
It is a large-scale, distributed, MPP (massively parallel processing) relational database technology in the same
class of competitors as Amazon Redshift or Snowflake. Azure SQL DW is an important component of the
Modern Data Warehouse multi-platform architecture. Because Azure SQL DW is an MPP system with a
shared-nothing architecture across distributions, it is meant for large-scale analytical workloads which can take
advantage of parallelism.
Box 3: Azure Data Lake Analytics
You can process big data jobs in seconds with Azure Data Lake Analytics. You can process petabytes of data
for diverse workload categories such as querying, ETL, analytics, machine learning, machine translation, image
processing and sentiment analysis by leveraging existing libraries written in .NET languages, R or Python.
Box 4: Azure HDInsight.
Apache Hadoop was the original open-source framework for distributed processing and analysis of big data
sets on clusters. The Hadoop ecosystem includes related software and utilities, including Apache Hive, Apache
HBase, Spark, Kafka, and many others.
Azure HDInsight is a fully managed, full-spectrum, open-source analytics service in the cloud for enterprises.
The Apache Hadoop cluster type in Azure HDInsight allows you to use HDFS, YARN resource management,
and a simple MapReduce programming model to process and analyze batch data in parallel.
References:
https://azure.microsoft.com/en-us/services/sql-database/
https://docs.microsoft.com/en-us/azure/sql-data-warehouse/sql-data-warehouse-overview-what-is
https://docs.microsoft.com/bs-latn-ba/azure/hdinsight/hadoop/apache-hadoop-introduction
https://www.blue-granite.com/blog/is-azure-sql-data-warehouse-a-good-fit-updated
https://azure.microsoft.com/en-gb/services/data-lake-analytics/
QUESTION 60
HOTSPOT
You need to identify which blades in the Azure portal must be used to perform the following tasks:
View security recommendations.
Monitor the health of Azure services.
Browse available virtual machine images.
Which blade should you identify for each task? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Correct Answer:

Section: Understand Core Azure Services
Explanation
Explanation/Reference:
Explanation:
Box 1:
Azure Monitor is used to monitor the health of Azure services.
Azure Monitor maximizes the availability and performance of your applications and services by delivering a
comprehensive solution for collecting, analyzing, and acting on telemetry from your cloud and on-premises
environments. It helps you understand how your applications are performing and proactively identifies issues
affecting them and the resources they depend on.
Box 2:
You can browse available virtual machine images in the Azure Marketplace.
Azure Marketplace provides access and information on solutions and services available from Microsoft and
their partners. Customers can discover, try, or buy cloud software solutions built on or for Azure. The catalog of
8,000+ listings provides Azure building blocks, such as Virtual Machines (VMs), APIs, Azure apps, Solution
Templates and managed applications, SaaS apps, containers, and consulting services.
Box 3.
Azure Advisor displays security recommendations.
Azure Advisor provides you with a consistent, consolidated view of recommendations for all your Azure
resources. It integrates with Azure Security Center to bring you security recommendations. You can get security
recommendations from the Security tab on the Advisor dashboard.
Security Center helps you prevent, detect, and respond to threats with increased visibility into and control over
the security of your Azure resources. It periodically analyzes the security state of your Azure resources. When
Security Center identifies potential security vulnerabilities, it creates recommendations. The recommendations
guide you through the process of configuring the controls you need.
References:
https://docs.microsoft.com/en-us/azure/azure-monitor/overview
https://docs.microsoft.com/en-us/azure/marketplace/marketplace-faq-publisher-guide
https://docs.microsoft.com/en-us/azure/advisor/advisor-security-recommendations
QUESTION 61
Note: This question is part of a series of questions that present the same scenario. Each question in
the series contains a unique solution that might meet the stated goals. Some question sets might have
more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these
questions will not appear in the review screen.
You have an Azure environment. You need to create a new Azure virtual machine from a tablet that runs the
Android operating system.
Solution: You use Bash in Azure Cloud Shell.
Does this meet the goal?
A. Yes
B. No
Correct Answer: A
Section: Understand Core Azure Services
Explanation
Explanation/Reference:
Explanation:
With Azure Cloud Shell, you can create virtual machines using Bash or PowerShell.
Azure Cloud Shell is an interactive, authenticated, browser-accessible shell for managing Azure resources. It
provides the flexibility of choosing the shell experience that best suits the way you work, either Bash or
PowerShell.
Reference:
https://docs.microsoft.com/en-us/azure/cloud-shell/quickstart
https://docs.microsoft.com/en-us/azure/cloud-shell/overview
QUESTION 62
HOTSPOT
You plan to create an Azure virtual machine.
You need to identify which storage service must be used to store the unmanaged data disks of the virtual
machine.
What should you identify? To answer, select the appropriate service in the answer area.
Hot Area:

Correct Answer:

Section: Understand Core Azure Services
Explanation
Explanation/Reference:
Explanation:
Azure page blobs are the backbone of the virtual disks platform for Azure IaaS. Both Azure OS and data disks
are implemented as virtual disks where data is durably persisted in the Azure Storage platform and then
delivered to the virtual machines for maximum performance. Azure Disks are persisted in Hyper-V VHD format
and stored as a page blob in Azure Storage.
References:
https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-pageblob-overview
QUESTION 63
Your company plans to move several servers to Azure.
The company’s compliance policy states that a server named FinServer must be on a separate network
segment.
You are evaluating which Azure services can be used to meet the compliance policy requirements.
Which Azure solution should you recommend?
A. a resource group for FinServer and another resource group for all the other servers
B. a virtual network for FinServer and another virtual network for all the other servers
C. a VPN for FinServer and a virtual network gateway for each other server
D. one resource group for all the servers and a resource lock for FinServer
Correct Answer: B
Section: Understand Core Azure Services
Explanation
Explanation/Reference:
Explanation:
Networks in Azure are known as virtual networks. A virtual network can have multiple IP address spaces and
multiple subnets. Azure automatically routes traffic between different subnets within a virtual network.
The question states that FinServer must be on a separate network segment. The only way to separate
FinServer from the other servers in networking terms is to place the server in a different virtual network to the
other servers.
References:
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-vnet-plan-design-arm
QUESTION 64
You plan to map a network drive from several computers that run Windows 10 to Azure Storage. You need to
create a storage solution in Azure for the planned mapped drive.
What should you create?
A. an Azure SQL database
B. a virtual machine data disk
C. a Files service in a storage account
D. a Blobs service in a storage account
Correct Answer: C
Section: Understand Core Azure Services
Explanation
Explanation/Reference:
Explanation:
Azure Files is Microsoft’s easy-to-use cloud file system. Azure file shares can be seamlessly used in Windows
and Windows Server.
To use an Azure file share with Windows, you must either mount it, which means assigning it a drive letter or
mount point path, or access it via its UNC path.
Unlike other SMB shares you may have interacted with, such as those hosted on a Windows Server, Linux
Samba server, or NAS device, Azure file shares do not currently support Kerberos authentication with your
Active Directory (AD) or Azure Active Directory (AAD) identity, although this is a feature we are working on.
Instead, you must access your Azure file share with the storage account key for the storage account containing
your Azure file share. A storage account key is an administrator key for a storage account, including
administrator permissions to all files and folders within the file share you’re accessing, and for all file shares and
other storage resources (blobs, queues, tables, etc) contained within your storage account.
References:
https://docs.microsoft.com/en-us/azure/storage/files/storage-how-to-use-files-windows
QUESTION 65
HOTSPOT
You plan to implement an Azure database solution.
You need to implement a database solution that meets the following requirements:
Can add data concurrently from multiple regions
Can store JSON documents
Which database service should you deploy? To answer, select the appropriate service in the answer area.
Hot Area:

Correct Answer:

Section: Understand Core Azure Services
Explanation
Explanation/Reference:
Explanation:
Azure Cosmos DB is Microsoft’s globally distributed, multi-model database service. With a click of a button,
Cosmos DB enables you to elastically and independently scale throughput and storage across any number of
Azure regions worldwide.
Azure Cosmos DB is a great way to store unstructured and JSON data. Combined with Azure Functions,
Cosmos DB makes storing data quick and easy with much less code than required for storing data in a
relational database.
References:
https://docs.microsoft.com/en-us/azure/cosmos-db/introduction
https://docs.microsoft.com/en-us/azure/azure-functions/functions-integrate-store-unstructured-data-cosmosdb?
tabs=csharp
QUESTION 66
Your company plans to migrate all its network resources to Azure.
You need to start the planning process by exploring Azure.
What should you create first?
A. a subscription
B. a resource group
C. a virtual network
D. a management group
Correct Answer: A
Section: Understand Core Azure Services
Explanation
Explanation/Reference:
Explanation:
The first thing you create in Azure is a subscription. You can think of an Azure subscription as an ‘Azure
account’. You get billed per subscription.
A subscription is an agreement with Microsoft to use one or more Microsoft cloud platforms or services, for
which charges accrue based on either a per-user license fee or on cloud-based resource consumption.
Microsoft’s Software as a Service (SaaS)-based cloud offerings (Office 365, Intune/EMS, and Dynamics 365)
charge per-user license fees.
Microsoft’s Platform as a Service (PaaS) and Infrastructure as a Service (IaaS) cloud offerings (Azure) charge
based on cloud resource consumption.
You can also use a trial subscription, but the subscription expires after a specific amount of time or
consumption charges. You can convert a trial subscription to a paid subscription.
Organizations can have multiple subscriptions for Microsoft’s cloud offerings.
References:
https://docs.microsoft.com/en-us/office365/enterprise/subscriptions-licenses-accounts-and-tenants-formicrosoft-cloud-offerings
QUESTION 67
You have an on-premises application that sends email notifications automatically based on a rule.
You plan to migrate the application to Azure.
You need to recommend a serverless computing solution for the application.
What should you include in the recommendation?
A. a web app
B. a server image in Azure Marketplace
C. a logic app
D. an API app
Correct Answer: C
Section: Understand Core Azure Services
Explanation
Explanation/Reference:
Explanation:
Azure Logic Apps is a cloud service that helps you schedule, automate, and orchestrate tasks, business
processes, and workflows when you need to integrate apps, data, systems, and services across enterprises or
organizations. Logic Apps simplifies how you design and build scalable solutions for app integration, data
integration, system integration, enterprise application integration (EAI), and business-to-business (B2B)
communication, whether in the cloud, on premises, or both.
For example, here are just a few workloads you can automate with logic apps:
Process and route orders across on-premises systems and cloud services.
Send email notifications with Office 365 when events happen in various systems, apps, and services.
Move uploaded files from an SFTP or FTP server to Azure Storage.
Monitor tweets for a specific subject, analyze the sentiment, and create alerts or tasks for items that need
review.
References:
https://docs.microsoft.com/en-us/azure/logic-apps/logic-apps-overview
QUESTION 68
You plan to deploy a website to Azure. The website will be accessed by users worldwide and will host large
video files.
You need to recommend which Azure feature must be used to provide the best video playback experience.
What should you recommend?
A. an application gateway
B. an Azure ExpressRoute circuit
C. a content delivery network (CDN)
D. an Azure Traffic Manager profile
Correct Answer: C
Section: Understand Core Azure Services
Explanation
Explanation/Reference:
Explanation:
The question states that users are located worldwide and will be downloading large video files. The video
playback experience would be improved if they can download the video from servers in the same region as the
users. We can achieve this by using a content deliver network.
A content delivery network (CDN) is a distributed network of servers that can efficiently deliver web content to
users. CDNs store cached content on edge servers in point-of-presence (POP) locations that are close to end
users, to minimize latency.
Azure Content Delivery Network (CDN) offers developers a global solution for rapidly delivering high-bandwidth
content to users by caching their content at strategically placed physical nodes across the world. Azure CDN
can also accelerate dynamic content, which cannot be cached, by leveraging various network optimizations
using CDN POPs. For example, route optimization to bypass Border Gateway Protocol (BGP).
The benefits of using Azure CDN to deliver web site assets include:
Better performance and improved user experience for end users, especially when using applications in
which multiple round-trips are required to load content.
Large scaling to better handle instantaneous high loads, such as the start of a product launch event.
Distribution of user requests and serving of content directly from edge servers so that less traffic is sent to
the origin server.
References:
https://docs.microsoft.com/en-us/azure/cdn/cdn-overview
QUESTION 69
Your company plans to deploy several million sensors that will upload data to Azure.
You need to identify which Azure resources must be created to support the planned solution.
Which two Azure resources should you identify? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. Azure Data Lake
B. Azure Queue storage
C. Azure File Storage
D. Azure IoT Hub
E. Azure Notification Hubs
Correct Answer: AD
Section: Understand Core Azure Services
Explanation
Explanation/Reference:
Explanation:
IoT Hub (Internet of things Hub) provides data from millions of sensors.
IoT Hub is a managed service, hosted in the cloud, that acts as a central message hub for bi-directional
communication between your IoT application and the devices it manages. You can use Azure IoT Hub to build
IoT solutions with reliable and secure communications between millions of IoT devices and a cloud-hosted
solution backend. You can connect virtually any device to IoT Hub.
There are two storage services IoT Hub can route messages to — Azure Blob Storage and Azure Data Lake
Storage Gen2 (ADLS Gen2) accounts. Azure Data Lake Storage accounts are hierarchical namespace-enabled
storage accounts built on top of blob storage. Both of these use blobs for their storage.
References:
https://docs.microsoft.com/en-us/azure/iot-hub/about-iot-hub
https://docs.microsoft.com/en-us/azure/iot-hub/iot-hub-devguide-messages-d2c
QUESTION 70
You have an Azure web app.
You need to manage the settings of the web app from an iPhone.
What are two Azure management tools that you can use? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
A. Azure CLI
B. the Azure portal
C. Azure Cloud Shell
D. Windows PowerShell
E. Azure Storage Explorer
Correct Answer: BC
Section: Understand Core Azure Services
Explanation
Explanation/Reference:
Explanation:
The Azure portal is the web-based portal for managing Azure. Being web-based, you can use the Azure portal
on an iPhone.
Azure Cloud Shell is a web-based command line for managing Azure. You access the Azure Cloud Shell from
the Azure portal. Being web-based, you can use the Azure Cloud Shell on an iPhone.
Incorrect Answers:
A: Azure CLI can be installed on MacOS but it cannot be installed on an iPhone.
D: Windows PowerShell can be installed on MacOS but it cannot be installed on an iPhone.
E: Azure Storage Explorer is not used to manage Azure web apps.
References:
http://www.deployazure.com/management/managing-azure-from-ipad/
QUESTION 71
This question requires that you evaluate the underlined text to determine if it is correct.
You have an application that is comprised of an Azure web app that has a Service Level Agreement (SLA) of
99.95 percent and an Azure SQL database that has an SLA of 99.99 percent.
The composite SLA for the application is the product of both SLAs, which equals 99.94 percent.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If the
statement is incorrect, select the answer choice that makes the statement correct.
A. No change is needed
B. the lowest SLA associated to the application, which is 99.95 percent
C. the highest SLA associated to the application, which is 99.99 percent
D. the difference between the two SLAs, which is 0.05 percent
Correct Answer: A
Section: Understand Core Azure Services
Explanation
Explanation/Reference:
Explanation:
Composite SLAs involve multiple services supporting an application, each with differing levels of availability. For
example, consider an App Service web app that writes to Azure SQL Database. At the time of this writing, these
Azure services have the following SLAs:
App Service web apps = 99.95%
SQL Database = 99.99%
What is the maximum downtime you would expect for this application? If either service fails, the whole
application fails. The probability of each service failing is independent, so the composite SLA for this application
is 99.95% × 99.99% = 99.94%. That’s lower than the individual SLAs, which isn’t surprising because an
application that relies on multiple services has more potential failure points.
References:
https://docs.microsoft.com/en-us/azure/architecture/reliability/requirements#understand-service-levelagreements
QUESTION 72
HOTSPOT
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Correct Answer:

Section: Understand Core Azure Services
Explanation
Explanation/Reference:
Explanation:
Box 1: No
Azure resources deployed to a single resource group can be located in different regions. The resource group
only contains metadata about the resources it contains.
When creating a resource group, you need to provide a location for that resource group. You may be
wondering, “Why does a resource group need a location? And, if the resources can have different locations
than the resource group, why does the resource group location matter at all?” The resource group stores
metadata about the resources. When you specify a location for the resource group, you’re specifying where that
metadata is stored. For compliance reasons, you may need to ensure that your data is stored in a particular
region.
Box 2: No
Tags for Resources are not inherited by default from their Resource Group
Box 3: Yes
A resource group can be used to scope access control for administrative actions. By default, permissions set
at the resource level are inherited by the resources in the resource group.
References:
https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-overview
QUESTION 73
Your company plans to deploy an Artificial Intelligence (AI) solution in Azure.
What should the company use to build, test, and deploy predictive analytics solutions?
A. Azure Logic Apps
B. Azure Machine Learning Studio
C. Azure Batch
D. Azure Cosmos DB
Correct Answer: B
Section: Understand Core Azure Services
Explanation
Explanation/Reference:
Explanation:
Microsoft Azure Machine Learning Studio (classic) is a collaborative, drag-and-drop tool you can use to build,
test, and deploy predictive analytics solutions on your data. Azure Machine Learning Studio (classic) publishes
models as web services that can easily be consumed by custom apps or BI tools such as Excel.
Machine Learning Studio (classic) is where data science, predictive analytics, cloud resources, and your data
meet.
References:
https://docs.microsoft.com/en-us/azure/machine-learning/studio/what-is-ml-studio
QUESTION 74
This question requires that you evaluate the underlined text to determine if it is correct.
Data that is stored in the Archive access tier of an Azure Storage account can be accessed at any time by using
azcopy.exe.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If the
statement is incorrect, select the answer choice that makes the statement correct.
A. No change is needed.
B. can only be read by using Azure Backup
C. must be restored before the data can be accessed
D. must be rehydrated before the data can be accessed
Correct Answer: D
Section: Understand Core Azure Services
Explanation
Explanation/Reference:
Explanation:
Azure storage offers different access tiers: hot, cool and archive.
The archive access tier has the lowest storage cost. But it has higher data retrieval costs compared to the hot
and cool tiers. Data in the archive tier can take several hours to retrieve.
While a blob is in archive storage, the blob data is offline and can’t be read, overwritten, or modified. To read or
download a blob in archive, you must first rehydrate it to an online tier.
Example usage scenarios for the archive access tier include:
Long-term backup, secondary backup, and archival datasets
Original (raw) data that must be preserved, even after it has been processed into final usable form.
Compliance and archival data that needs to be stored for a long time and is hardly ever accessed.
References:
https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-storage-tiers?tabs=azure-portal#archiveaccess-tier
QUESTION 75
HOTSPOT
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Correct Answer:

Section: Understand Core Azure Services
Explanation
Explanation/Reference:
Explanation:
Box 1: No
Azure Advisor provides you with a consistent, consolidated view of recommendations for all your Azure
resources. It integrates with Azure Security Center to bring you security recommendations. You can get security
recommendations from the Security tab on the Advisor dashboard. Examples of recommendations include
restricting access to virtual machines by configuring Network Security Groups, enabling storage encryption,
installing vulnerability assessment solutions.
However, Azure Advisor does not provide recommendations on how to improve the security of an Azure AD
environment.
Box 2: Yes
Advisor helps you optimize and reduce your overall Azure spend by identifying idle and underutilized resources.
You can get cost recommendations from the Cost tab on the Advisor dashboard.
Box 3: No.
Azure Advisor does not provide recommendations on how to configure network settings on Azure virtual
machines.
References:
https://docs.microsoft.com/en-us/azure/advisor/advisor-security-recommendations
https://docs.microsoft.com/en-us/azure/advisor/advisor-cost-recommendations

Previous Page Next Page