Microsoft Certified Azure Fundamentals Study Guide. James Boyce
in Microsoft Azure refers to:A. The ease with which you can move workloads from on‐premises to Azure and back againB. The ability to quickly adjust resources such as memory to adapt to changes in demandC. The ability to add more front‐end web servers to a web application to adapt to increased demandD. The ability to quickly create redundancy in a solution
1 4. Which of the following describes the benefit economy of scale as it relates to Microsoft Azure?A. The capability to distribute resources across multiple regions to reduce costB. The ability to place resources in less expensive Azure regions to reduce costsC. The capability to automatically scale down the number of virtual machines in an Azure solution to reduce costs when demand decreasesD. The decrease in price per subscriber as more subscribers are added
1 5. Which of the following in an example of vertical scaling?A. Adding VMs to a web app as demand increasesB. Reducing memory allocated to VMs when demand decreasesC. Adding CPU cores to a VM when demand increasesD. Both B and C
1 6. A service that provides the capability to deploy a SQL database without the need for you to set up a VM or install SQL Server is an example of:A. Infrastructure‐as‐a‐service (IaaS)B. Software‐as‐a‐service (SaaS)C. Platform‐as‐a‐service (PaaS)D. Data‐as‐a‐service (DaaS)
1 7. Accessing an application through a web page rather than installing the application on your local device is an example of:A. Infrastructure‐as‐a‐service (IaaS)B. Software‐as‐a‐service (SaaS)C. Platform‐as‐a‐service (PaaS)D. Data‐as‐a‐service (DaaS)
1 8. Deploying virtual machines (VMs) in a shared cloud environment is an example of:A. Infrastructure‐as‐a‐service (IaaS)B. Software‐as‐a‐service (SaaS)C. Platform‐as‐a‐service (PaaS)D. Data‐as‐a‐service (DaaS)
1 9. Which of the following accurately describes an Azure geography?A. It corresponds to a single country or to a market encompassing multiple countries.B. It always corresponds to a specific country.C. It represents a set of physical data centers.D. None of the above.
1 10. An Azure region:A. Describes a specific Azure data centerB. Is usually paired with another region to ensure high availabilityC. Can span across multiple countriesD. Encompasses the data centers in which all of your Azure resources reside
1 11. Azure China is a physically isolated instance of Azure available only to Chinese government entities.A. YesB. No
1 12. You are deploying three VMs in a single region as web front ends to a web application. You need to ensure that power outages or other potential data center outages do not make your web application unavailable. Which of the following achieves this goal?A. You place the VMs in an availability set.B. You place the VMs in separate resource groups.C. You place the VMs in different availability zones.D. You deploy additional VMs to other regions.
1 13. What is the function of a resource group in Azure?A. It provides automatic scaling of CPU cores, memory, and other resources for VMs.B. It enables you to establish a higher SLA for VMs.C. It protects resources from being deleted.D. It serves as a logical container for Azure resources.
1 14. Is the underlined portion of the following statement true, or does it need to be replaced with one of the other fragments that appear below?Azure Resource Manager enables you to deploy multiple resources using JSON‐based templates.A. is the primary tool you use to manage resources in Azure.B. is the blade in Azure portal that provides access to resource management and monitoring tools, including management templates.C. enables you to interactively allocate additional CPU cores and memory to VMs.D. No change is needed.
1 15. Which of the following statements is not true regarding Azure subscriptions?A. A subscription is aligned to a specific Azure region.B. You can move resources from one subscription to another.C. Subscriptions can help simplify Azure billing and cost management.D. You can move a subscription to a new Azure AD tenant.
1 16. Azure App Service provides support for multiple development languages, containers, and Windows and Linux.A. YesB. No
1 17. Which of the following can you use to orchestrate container management in Azure?A. Azure Container Instance (ACI)B. Azure Resource ManagerC. Azure KubernetesD. Azure CLI
1 18. Is the underlined portion of the following statement true, or does it need to be replaced with one of the other fragments that appear below? Containers that you deploy in a group Azure support only the Linux OS.A. support only the Windows OS.B. share the same OS as other containers in the group.C. require configuration of the OS for each container.D. No change is needed.
1 19. You need to set up a storage solution in Azure to enable you to store the state of an application from one execution of the application to the next. Which of the following storage solutions provide that capability?A. Azure DiskB. Azure BlobC. Azure FilesD. Azure Archive
1 20. Which of the following data solutions would be the most cost‐efficient solution for storing and retrieving sales data for your sales team using SQL statements?A. Host a database using Azure SQL DatabaseB. Host a database using Azure Managed SQL InstanceC. Install SQL Server on a VM in AzureD. Host a database using Cosmos DB
1 21. Which of the following does not provide load balancing between resources in Azure?A. Azure Front DoorB. Azure Traffic ManagerC. Azure Load BalancerD. Azure network security groups (NSGs)
1 22. You have deployed a web application in Azure and need HTTPS traffic to be routed to a specific endpoint based on the requested URL. Which of the following load‐balancing solutions provides this capability?A. Azure Traffic ManagerB. Azure Load BalancerC. Azure Application GatewayD. Azure network security groups
1 23. You need to ensure that network traffic between your on‐premises data center and Azure is securely encrypted as it traverses the Internet, but you do not want your organization to manage the service. Which of the following should you choose?A. Azure VPN GatewayB. Azure Point‐to‐Point VPN C. Azure ExpressRouteD. Azure ExpressRoute Direct
1 24. Your organization has compliance restrictions that prevent your data from traversing the Internet between your on‐premises data center and your resources in Azure. Which of the following provides a solution for this requirement?A. Azure Managed VPNB. Azure ExpressRoute DirectC. Azure VPN GatewayD. Azure ExpressRoute
1 25. Which of the following is an appropriate solution for placing video files and large documents close to where your globally dispersed users are located to reduce latency?A. A dedicated point‐to‐point VPN connection between the source files and each location.B. Azure DirectRouteC. Azure Content Delivery NetworkD. None of the above
1 26. Which of the following solutions would enable only you and one of your peers to access and manage an Azure VM using RDP on port 3389?A. Role‐based access control (RBAC) and an Azure network security group (NSG)B. An appropriately designed Azure policy applied to the resource group containing the VMC. Azure FirewallD. Azure Front Door
1 27. You are deploying a VM‐based solution, and due to security and compliance requirements, all traffic reaching that VM must come from a single endpoint located in a different subnet. Which of the following solutions meets this requirement?A. Create a network security group (NSG) with the appropriate routing and apply the NSG to all virtual networks.B. Create a user‐defined route and apply it to all subnets in the virtual network.C. Use Azure Firewall to route traffic to the target VM based on the IP address in the resource request URL.D. Create a custom route in Azure Firewall to direct traffic to the endpoint based on source and destination address.
1 28. Replace the underlined section of the statement if needed to make the statement true:Azure DDoS Protection Standard alerts you to DNS attacks as they are happening.A. begins protecting resources from DNS attacks as soon as you configure DDoS on the resource.B. begins protecting resources from DNS attacks as soon as you configure the service on a virtual