Q1.In this question, you must determine whether the statement shown in bold is appropriate.
After creating a new virtual machine, you must modify the network security group (NSG) in order to allow connections to the virtual machine over TCP port 8080.
Show answer
In Azure, inbound communication to a virtual machine is controlled by a network security group (NSG).
To allow external connections to the virtual machine over TCP port 8080, you must add or modify an inbound security rule in the NSG.
A virtual network gateway and a route table are features for VPN connectivity and route control, and they do not handle allowing traffic on a per-port basis.
Therefore, the statement that “you must modify the NSG” is correct, and “No change is needed” is the correct answer.
Overview of Azure network security groups
Q2.You need to procure a third-party virtual security appliance to deploy on your Azure subscription.
Where should you obtain it?
Show answer
A third-party virtual security appliance to deploy on an Azure subscription is purchased and deployed from the Azure Marketplace, the official catalog provided by Azure.
The Marketplace offers many non-Microsoft vendor solutions such as firewalls and IDS/IPS.
Defender for Cloud is a service that manages and provides visibility into your protection posture; it is not the place where products are purchased.
Therefore, the correct answer is Azure Marketplace.
Overview of the Microsoft Marketplace
Q3.For each of the following statements, select “Yes” if the statement is correct, or “No” if it is not.
| Statement | Yes | No | |
|---|---|---|---|
| With an Azure free account, you can create multiple subscriptions | |||
| When an Azure free account expires, it is automatically converted to a paid pay-as-you-go plan | |||
| An Azure free account includes credits that can be used for a limited period |
Show answer
With an Azure free account, you can normally create only one subscription; creating multiple subscriptions becomes possible after signing a paid agreement.
Also, even when the free period or the credit’s validity ends, billing does not start automatically, and you are not moved to pay-as-you-go unless you explicitly upgrade.
On the other hand, a free account includes Azure credits usable for a limited period, letting you try out services within that limit.
Therefore, the correctness of each statement is No, No, Yes.
Q4.An Azure administrator is trying to run a PowerShell script that creates Azure resources.
You need to recommend a computer configuration for running that script.
Proposed solution: Run the script by using Azure Cloud Shell from a computer running Chrome OS.
Does this proposal meet the goal?
Show answer
Azure Cloud Shell is a cloud-based management environment that you can use as long as you have a web browser, and it can run PowerShell scripts regardless of the OS.
Even on Chrome OS, you can access the Azure portal from a browser to launch Cloud Shell and create and manage Azure resources.
There is no need to install PowerShell or the Azure CLI locally.
Therefore, this proposal to use Cloud Shell on Chrome OS meets the requirement, and the answer is “Yes”.
What is Azure Cloud Shell?
Q5.Which of the following tasks can you perform by using Azure Advisor?
Show answer
Azure Advisor analyzes the state of your Azure resources and provides recommendations for improvement from the perspectives of cost optimization, security, reliability, and operational excellence.
In the area of security, it evaluates whether your subscription and resource configurations follow Microsoft’s best practices and indicates points for improvement.
Cost estimation is handled by the Pricing Calculator, and Entra ID integration and on-premises migration assessment are handled by other services.
Therefore, the correct answer is C.
Overview of Azure Advisor
Q6.Select the term that correctly completes the following sentence.
( ) is used to organize resources within an Azure subscription into a logical group.
Show answer
A resource group is a unit for logically grouping and managing resources within an Azure subscription.
It lets you handle resources that share the same lifecycle or purpose together, which helps with access control (RBAC), cost management, and more efficient deployment.
A management group is a hierarchy for grouping multiple subscriptions, Azure Policy defines rules, and an Azure role defines permissions, so their roles are different.
Therefore, the term that completes the sentence is resource group.
Overview of Azure Resource Manager
Q7.In this question, you must evaluate the underlined statement and determine whether it is correct.
One advantage of Azure SQL Data Warehouse is that high availability is built into the platform by default.
Show answer
Azure SQL Data Warehouse (now called the dedicated SQL pool in Azure Synapse Analytics) is a data warehouse service offered as PaaS, and one of its features is that high availability is built into the platform.
Because Microsoft handles infrastructure management and failover, users do not need to individually design an availability configuration.
Therefore, the statement that “high availability is built into the platform” is correct, and no change to the sentence is needed.
What is a data warehouse?
Q8.For each of the following statements, select “Yes” if the statement is correct, or “No” if it is not.
| Statement | Yes | No | |
|---|---|---|---|
| An Azure virtual machine must always have a public IP address | |||
| You can use a network security group (NSG) to restrict traffic to a virtual network | |||
| An Azure load balancer is used to distribute traffic evenly across multiple virtual machines |
Show answer
An Azure virtual machine does not necessarily need to have a public IP; if only internal communication is required, it can operate with just a private IP.
A network security group (NSG) can control inbound and outbound traffic with rules and can be applied to a virtual network, a subnet, or a NIC.
An Azure load balancer distributes traffic across multiple virtual machines and is used to improve availability and scalability.
Therefore, the correctness of each statement is No, Yes, Yes.
Overview of Azure network security groups
Q9.For each of the following statements, select “Yes” if the statement is correct, or “No” if it is not.
| Statement | Yes | No | |
|---|---|---|---|
| The Azure Total Cost of Ownership (TCO) Calculator is used to estimate the cost savings from migrating to Azure | |||
| The Pricing Calculator is used to compare the cost of existing on-premises infrastructure | |||
| You can use Cost Management and Billing to gain visibility into your Azure spending |
Show answer
The Azure Total Cost of Ownership (TCO) Calculator is used to compare an on-premises environment with Azure and to estimate the cost savings from migration.
On the other hand, the Pricing Calculator is a tool for estimating the cost of services used on Azure, and it is not intended for comparing the cost of existing on-premises infrastructure.
With Cost Management and Billing, you can gain visibility into usage and billing data to analyze Azure spending and manage budgets.
Therefore, the correctness of each statement is Yes, No, Yes.
Pricing Calculator
Q10.You need to identify the type of failure against which using Azure availability zones can protect access to Azure services.
Which failure should you identify?
Show answer
Availability Zones consist of multiple physically separated datacenters within the same region, each with independent power, cooling, and networking.
As a result, even if an entire datacenter fails, you can continue the service using resources in another zone (another datacenter).
Protection against failures at the physical server or rack level is provided by availability sets, and protection against an entire region’s failure is provided by region pairs, so their roles are different.
Therefore, the failure that availability zones can protect against is a datacenter failure.
What are availability zones?