Azure Fundamentals Quiz 3

1. What does a customer provide in a software as a service (SaaS) model ?

• application data

• data storage

• compute resources

• application software

Answer explanation

In a SaaS model, the SaaS provider hosts and manages the software application on their servers, and customers access and use the application remotely via the internet. Customers provide their own application-specific data to the SaaS application, which is processed and stored by the SaaS provider's infrastructure. The SaaS provider takes care of providing the necessary data storage, compute resources, and application software, making it a convenient solution for users who don't want to manage the underlying technical details themselves.

Which of the following statements are correct ?

1.A company can extend a private cloud by adding its own physical servers to the public cloud.

2. 2.To build a hybrid cloud , you must deploy resources to the public cloud.

3.A private cloud must be disconnected from the internet.

• 1 & 2 are correct

• Only 2 is correct

• 1 & 3 are correct

• 1,2 & 3 are coorect

Answer explanation

The correct statements are:

2. To build a hybrid cloud, you must deploy resources to the public cloud.

Building a hybrid cloud involves integrating and managing resources across both private and public cloud environments. This often means deploying certain resources or services to the public cloud while keeping others in the private cloud, and establishing connections and integrations between them.

3. A private cloud must be disconnected from the internet.

This statement is generally not correct.

A private cloud is a cloud infrastructure that is dedicated to a single organization. It can be hosted on-premises or in a data center and offers similar benefits to public clouds, such as scalability and self-service provisioning. However, private clouds can be connected to the internet to facilitate data exchange, updates, and other necessary functionalities. The level of internet connectivity and security measures would depend on the organization's specific requirements and policies.

The Nutex Corporation has deployed multiple subscriptions and multiple resources and resource groups on Azure. You are part of the Azure management team who must simplify policy management on Azure.

Which of the following statements about the Initiatives feature in Azure are TRUE? (Choose three.)

A. Initiative parameters help simplify initiative management by reducing redundancy.
B. The maximum allowed initiative definitions for a tenant is 100.
C. The scope for an initiative definition must either be a management group or a subscription.
D. An initiative definition is a collection of policy definitions that can be used for a common overarching goal.

• A,B & C are correct

• A,C & D are correct

• A,B & D are coorect

• B,C & D are coorect

Answer explanation

Explanation

An initiative definition is a collection of policy definitions that can be used as a common overarching goal.

Definitions group a set of policies as one single item that can be assigned to scopes.

The scope for an initiative definition must either be a management group or a subscription:

• Subscription – Resources within that subscription can be assigned the policy.

• Management group – Resources within child management groups and child subscriptions can be assigned the policy. The location must be a management group that contains those subscriptions if you plan to apply the policy definition to several subscription

It is not true that the maximum number of allowed initiative definitions for a tenant is 100.

The following is the maximum counts of policy objects you can create per scope or tenant:

• Policy definitions per scope – 500

• Initiative definitions per scope – 100

• Initiative definitions per tenant – 1,000

• Policy or initiative assignments per scope – 100

• Parameters per policy definition – 20

• Policies per initiative definition – 100

• Parameters per initiative definition – 100

Which of the following are characteristics of a public cloud? Choose three.

A. Virtually unlimited storage
B. Only one tenant is supported
C. Resource pooling
D. Services are always free
E. Provider manages the network and virtualization software

• A,C & E are correct

• A,B & D are correct

• B,C & D are correct

• B,C & E are correct

You are the administrator of the Nutex Corporation. You build a Web API 2 HTTP API (hosted on-premises) for the NutexApp application, which is responsible for managing shipping orders. The identity management for the app has to be outsourced to Azure Active Directory B2C.

Service consumers will rely on Azure Active Directory B2C to add features to the app that will support sign up and sign-in for new accounts using identity providers like Facebook, Google, Amazon, LinkedIn, or using Microsoft accounts. Users should be able to sign in with their individual credentials. The consumer does not have to edit the profile attribute, but you want to allow the option to reset the password.

Which kind of policies should you create to meet the requirements with the least amount of effort? (Choose two.)

A. Sign-up policy
B. Sign-in policy
C. Password reset policy
D. Sign-up or sign-in policy
E. Profile editing policy

• C & D are correct

• A & C are correct

• B & C are correct

• D & E are correct

Answer explanation

Explanation :

You should create a sign-up or sign-in policy and a password reset policy. The sign-up or sign-in policy controls the consumer sign-up and sign-in experiences with a single policy. The sign-up or sign-in policy allows users to choose the right path for either sign-up or sign-in with identity provider credentials, depending on the context. This policy also describes the contents of tokens used for sign-ups or sign-ins from the application.

The password reset policy allows you to enable a fine-grained password to reset on your application. Note that the tenant-wide password reset option that has been specified is still applicable for sign-in policies.

After creating a sign-in policy (with local accounts) or a sign-up policy, the user should see on the first page of the experience a link for “Forgot Password” reminder. If the user clicks the link, the link will not automatically trigger a password reset policy. It will generate a specific error code AADB2C90118, which is returned back to your app. You must write logic into your app to handle this error and invoke a specific password reset policy.

Which Azure Active Directory (Azure AD) feature is used to provide access to resources

based on organizational policies?

• multi-factor authentication (MFA)

• single sign-on (SSO)

• administrative units

• Conditional Access

Answer explanation

Conditional Access is the tool used by Azure Active Directory to allow (or deny) access to resources based on identity signals. Conditional access is a more refined MFA (multifactor authentication) method.

Single sign-on (SSO) is __________ method that enables users to sign in the first time and access various applications and resource by using same password.

• an authentication

• a validation

• a configuration

• an authorization

Answer explanation

Single sign-on is an authentication method that allows users to sign in using one set of credentials to login across applications. Single sign-on makes it easier to manage passwords and increases security capabilities.

Your company needs to protect their application and data from datacenter failures. The company plans to move to Azure. You want to ensure that applications and data are stored in availability zones.

Which of the following statements best describes availability zones?

• A discrete market typically containing two or more regions that preserves data residency and compliance boundaries

• A geographical area containing at least one, but potentially multiple, datacenters that are in close proximity and networked together with a low-latency network

• A way for you to ensure your application remains online if a high-impact maintenance event is required or a hardware failure occurs

• Physically separate locations within an Azure region

Answer explanation

Explanation :

Availability zones are physically separate locations within an Azure region. Each availability zone has one or more datacenters. Each datacenter is equipped with independent power, cooling, and networking. Availability zones protect your applications and data from datacenter failures.

An availability zone is not a discrete market typically containing two or more regions that preserves data residency and compliance boundaries. That describes a geography. A geography is a unique market that contains two or more regions that stores data in the regions according to the compliance boundaries of the regions.

An availability zone is not a geographical area containing at least one, but potentially multiple, datacenters that are in close proximity and networked together with a low-latency network. That describes a region. A region is a geographical area containing one or more datacenters networked together with a low-latency network and are in close proximity.

You work as part of the Product Deployment team at the Nutex Corporation. You have a series of products to deploy on Azure. These products are targeted at audiences in different geographies. You need to understand the impact of deploying products by their geography.

Which of the following statements concerning pricing by geographies for Azure are TRUE? (Select all that apply.)

• All Azure products are available in all Azure regions.

• A region in Azure is a set of geographies that preserves data residency and compliance boundaries.

• Azure services are charged the same across all geographies.

• Azure Australia has two featured Azure Australia Central regions.

Answer explanation

Explanation :

The following statements are true:

• A region in Azure is a set of geographies that preserves data residency and compliance boundaries.

• Azure Australia has two featured Azure Australia Central regions.

A region consists of datacenters connected through a regional low-latency network and deployed within a latency-defined perimeter. Azure regions are organized into geographies typically containing two or more regions, which preserve data residency and compliance boundaries.

Which of the following are examples of SaaS? (Choose two.)

• Microsoft Azure

• Google Compute Engine

• Salesforce

• Google Apps

• Amazon Web Services Elastic Beanstalk