Continuing from the previous article - Azure Fundamentals Knowledge Check - Part 4
121. In which cloud service model is the customer responsible for managing the operating system?
a. IaaS
b. PaaS
c. SaaS
122. Your organization is building a custom application. You need to focus on application development rather than configuration and management of servers. Which cloud service model should you use?
a. IaaS
b. PaaS
c. SaaS
123. Which features are available by using Azure Cost Management + Billing ?
a. Create and manage budgets
b. Generate historical reports and forecast future usage
c. Provide discounted prices when you pay in advance
d. Estimate the total cost of ownership before resources are deployed
124. Which actions can be performed by using the graphical user interface (GUI) in the Azure portal?
a. Create new resources
b. Review a graphical view of all the services you are using
c. Change the availability zone of a virtual machine
d. Repeatedly set up one or more resources and ensure that all the dependencies are created in the proper order.
125. What can you use to create resources in Azure and includes a validation step to ensure that all the resources can be created in the proper order based on dependencies, in parallel and idempotent?
a. Azure Resource Manager (ARM) templates
b. Azure CLI
c. Azure Powershell
d. Azure REST API
Answers:
121-a IaaS consists of VMs and networking provided by the cloud provider. The customer is responsible for the OS and applications. The cloud provider is responsible for the OS in PaaS and SaaS.
122-b With PaaS, users can focus on application development because the cloud provider handles all the platform management.
123-a,b Azure Cost Management allows you to create and manage cost and usage budgets by monitoring resource demand trends, consumption rates, and cost patterns. It also allows you to use historical data to generate reports and forecast future usage and expenditures.
124-a,b The Azure portal provides a GUI to view all the services you are using, create new services, configure your services, and view reports.
125-a ARM templates define an application's infrastructure requirements for a repeatable deployment that is done in a consistent manner. A validation step ensures that all resources can be created in the proper order based on dependencies, in parallel and idempotent.
126. What provides recommendations to reduce the cost of Azure resources?
a. Azure Advisor
b. Azure Security Center
c. Azure Dashboard
d. Azure Service Health
127. What can you use to monitor outages in a specific Azure region?
a. Azure Advisor
b. Azure Security Center
c. Azure Monitor
d. Azure Service Health
128. In a region pair, a region is paired with another region in the same ____________?
a. Geography
b. Availability Zone
c. Data Center
d. Resource Group
129. Which two components are created in an Azure subscription? Each correct answer presents a complete solution?
a. Resources
b. Resource Groups
c. Management Groups
d. Azure AD user accounts
130. Which Azure component allows you to replicate resources across a geography to ensure business continuity during a natural disaster at the primary site?
a. Region pairs
b. Availability Zones
c. Availability Sets
d. Azure Virtual Machine Scale Sets
Answers:
126-a Azure Advisor analyzes the account usage and makes recommendations based on its set and configured rules.
127-d Service Health notifies you of Azure-related service issues, such as region-wide downtime.
128-a Each Azure region is always paired with another region within the same geography, such as US, Europe, or Asia, at least 300 miles away.
129-a,b Resources can only be associated with a single subscription. Subscriptions may be grouped into management groups. An account may be associated with multiple subscriptions.
130-a Region pairs allow the replication of Azure resources across geographies to help ensure that a secondary region is available in case of any disaster at the primary region.
131. Which storage service offers fully managed file shares in the cloud that are accessible by using industry-standard network protocols?
a. Azure Disk Storage
b. Azure Table storage
c. Azure Queue Storage
d. Azure Files
132. What Azure AD feature can you use to ensure that users can only access Microsoft Office 365 applications from approved client applications?
a. Azure role-based access control (RBAC)
b. Single sign-on (SSO)
c. Conditional Access
d. Multi-factor authentication (MFA)
133. In cloud computing, _________ allows you to deploy applications to regional datacenters around the world.
a. High availability
b. Disaster recovery
c. Geo-location
d. Elasticity
134. You need to ensure that multi-factor authentication (MFA) is enabled on accounts with write permissions in an Azure subscription. What should you implement?
a. resource tags
b. Cloud Adoption Framework
c. resource locks
d. Azure Policy
135. What allows you to orchestrate the deployment of resource templates and other artifacts?
a. Azure Blueprints
b. Azure Functions
c. Azure App Services
d. Azure Cognitive Services
Answers:
131-d Azure Files offers fully managed file shares in the cloud with shares that are accessible by using industry-standard network protocols. Mounting Azure file shares is just like connecting to shares on a local network.
132-c Conditional Access allows administrators to control, allow, or deny access to resources based on certain signals. You can require that access to certain applications only be allowed if the users are using an approved client application. MFA is a process whereby a user is prompted during the sign-in process for an additional form of identification. Examples include a code on their mobile phone or a fingerprint scan.
133-c You can deploy apps and data to regional datacenters around the globe, thereby ensuring that your customers always have the best performance in their region. This is referred to as geo-distribution.
134-d Azure Policy is a service in Azure that enables you to create, assign, and manage policies that control or audit resources.
135-a Azure Blueprints simplifies large scale Azure deployments by packaging key environment artifacts, such as Azure Resource Manager (ARM) templates, role-based access controls (RBAC), and policies, into a single blueprint definition. You can easily apply the blueprint to new subscriptions and environments.
136. Which management layer accepts requests from any Azure tool or API and enables you to create, update, and delete resources in an Azure account?
a. Azure Resource Manager (ARM)
b. Azure management groups
c. Azure CLI
d. Azure Sphere
137. Where can the IT department find reference blueprints that it can apply directly to its Azure subscriptions?
a. Online Services Terms
b. Azure compliance documentation
c. Microsoft Privacy Statement
138. You are running a virtual machine in a public cloud using IaaS. Which model correctly reflects how that resource is managed?
a. Shared responsibility model
b. Cloud user management model
c. User management model
Answers:
136-a ARM is the deployment and management service for Azure. It provides a management layer that enables you to create, update, and delete resources in an Azure account.
137-b The compliance documentation provides reference blueprints, or policy definitions, for common standards that you can apply to your Azure subscription.
138-a The shared responsibility model is the correct answer. Under the shared responsibility model, management of the resource is shared between the cloud provider and the end user. The cloud provider being responsible for the cloud services infrastructure and the end user being responsible for the service being configured and managed correctly.