AZ 900 Practice set 2 Part 1

Sofia's tech startup has 500 virtual machines hosted in an on-premises environment. She plans to migrate all of these to Azure.

What will her spending model be after moving to Azure?

• Capital expense

• Operating expense

• Flexible expense

• Expansive expense

Answer explanation

Overall explanation

Option 2 is the correct answer. Azure's pay-as-you-go spending model means you only pay for what you use, with no upfront costs. Details of capital and operating expenses are provided below:

■Capital expenses (CapEx)
CapEx is fixed expenditures such as capital expenditures. This is the expenditure type where you invest in physical infrastructure in advance, such as a data center. CapEx requires an initial cost, which then gets lower over time.   

■ Operating expenses (OpEx)
OpEx is a type of expenditure in which you are charged according to usage time etc. as a service. This spending type has no upfront costs and is pay-as-you-go, based on how much you use the service or product. So spending on cloud services like Azure is essentially an operating expense. 

 

[Reference] 

Preparing for what’s next: Financial considerations for cloud migration | Azure Blog and Updates | Microsoft Azure

Domain

Describe cloud concepts

Alexander, a data security manager, is tasked with ensuring that his company's Azure deployments comply with the latest security standards. Which Azure service should he use to stay informed and protect the company's data?

• Azure Government

• Online Service Terms

• Trust center

• Azure compliance document

Answer explanation

Overall explanation

Option 3 is the correct answer. The Trust Center is a portal that provides Microsoft principles for maintaining data integrity in the cloud and support for Microsoft cloud products and security, privacy and compliance.

Using the Trust Center, you can get resources to support the legal and compliance community. Therefore, the Trust Center is the best place for information on compliance and security standards. 

 

Option 1 is incorrect. Azure Government is a set of instances dedicated to the US government that are separate from commonly used Microsoft Azure services. It is specifically tailored to meet the security and compliance needs of US federal agencies, state/ local governments, and their solution providers. Azure Government has the ability to provide physical separation from non-US government agencies and can screen US personnel.    

Option 2 is incorrect. The Online Services Terms (OST) is a legal agreement between Microsoft and you. The OST details how we handle customer data and personal data and our security obligations.   

Option 4 is incorrect. The Azure Compliance Documentation provides detailed documentation on compliance certifications such as on IOS. This is an official document on Azure compliance and is not suitable for a deep understanding of security content. The Trust Center is a better place to understand security standards.

 

[Reference]

Microsoft Trust Center Overview | Microsoft Trust Center

Domain

Describe Azure management and governance

Imagine you are a security consultant named Aarav, tasked with assessing whether the Azure resources of a client, Ellie, meet security standards. Which solution should you use?

• Knowledge Center website

• Azure Advisor

• Compliance manager

• Microsoft Defender for Cloud

Answer explanation

Overall explanation

Option 4 is the correct answer. Microsoft Defender for Cloud is a support service that helps users respond to security gaps, while detecting and preventing threats through visualizing and controlling the security of Azure resources. Microsoft Defender for Cloud continuously discovers new resources deployed across your workloads and assesses whether they have been configured according to security best practices. As a result, Microsoft Defender for Cloud flags any issues and lists the recommendations needed to protect your Azure resources.

 

Option 1 is incorrect. The Knowledge Center is a QA website that provides all answers related to Azure services. 

Option 2 is incorrect. Azure Advisor is a service that automatically analyzes user usage and recommends best practices based on this usage.   

Option 3 is incorrect. Compliance Manager is a workflow-based risk assessment tool documented by Microsoft on the Microsoft Service Trust Portal. Compliance Manager allows you to track, assign, and validate your organization's regulatory compliance activities related to Microsoft professional services and Microsoft cloud services such as Microsoft Office 365, Microsoft Dynamics 365, and Microsoft Azure.

 

[Reference]

What is Microsoft Defender for Cloud? - Microsoft Defender for Cloud | Microsoft Learn

Domain

Describe Azure management and governance

Select "Yes" if the following statement is true, otherwise select "No".  

 

Grace is considering Azure pay-as-you-go pricing for her startup. This pricing model is an example of CapEx.

• No

• Yes

• Maybe

• Sometimes

Answer explanation

Overall explanation

The correct answer is "No".

"CapEx (Capital Expense)" refers to expenditure on facilities such as data centers. On the other hand, "OpEx (Operating Expense)" is the various expenses necessary to operate a business.   Azure is a pay-as-you-go payment model. Pay-as-you-go is a subscription-type payment form where you pay for what you use. This is an example of OpEx. 

CapEx is an expenditure type in which you pay the initial cost for facilities such as data centers, and the cost reduces after this point. So Azure's pay-as-you-go pricing is not an example of CapEx.

 

[Reference]

Preparing for what’s next: Financial considerations for cloud migration | Azure Blog and Updates | Microsoft Azure

Domain

Describe cloud concepts

Select "Yes" if the following statement is true, otherwise select "No".   

 

Microsoft Defender for Cloud can monitor Azure and on-premises resources used by Scarlett's company

• No

• Maybe

• Sometimes

• Yes

Answer explanation

Overall explanation

The correct answer is yes.

Microsoft Defender for Cloud is an integrated infrastructure security management system that strengthens your system's security posture. Microsoft Defender for Cloud has advanced threat protection capabilities that protect across hybrid workloads on the Azure cloud and on-premises. It also allows you to know the state of your resources and whether or not they are secure. 

You can add the Defender for Cloud feature to your hybrid cloud environment to protect your on-premises servers. This feature retrieves threat intelligence and prioritized alerts tailored to your specific environment which will prompt users to take action. To protect your on-premises servers with Defender for Cloud, you can deploy Azure Arc on your servers to enable Defender for Cloud's enhanced security features. 

 

[Reference] 

Azure Arc – Hybrid and Multi-Cloud Management and Solution (microsoft.com)

What is Microsoft Defender for Cloud? - Microsoft Defender for Cloud | Microsoft Learn

Domain

Describe Azure management and governance

Ella is starting a small business and needs a software solution that she can use on a subscription basis without managing the underlying infrastructure. Which cloud service model should she consider?

• PaaS

• IaaS

• SaaS

• DaaS

Answer explanation

Overall explanation

Option 3 is the correct answer. Software as a Service (SaaS) is cloud-based software that allows you to use the necessary functions and features as a fully realized service, as much as you need. It may also indicate a finished solution that is available over the Internet. An example of SaaS is Adobe Illustrator on a subscription basis with a monthly fee. 

 

Option 1 is incorrect. Platform as a Service (PaaS) is a cloud format that provides solutions in a customizable format, including the hardware and OS on which application software is hosted. Users configure their own settings in their PaaS-type services and use them to develop their own solutions.

Option 2 is incorrect. Infrastructure as a Service (IaaS) is a cloud format that allows you to use the necessary hardware over the network when using servers, etc.    

Option 4 is incorrect. Desktop as a Service (DaaS) refers to virtual desktops. This is a cloud service that provides a desktop virtualization system deployed in a cloud environment.

Domain

Describe cloud concepts

Charlotte is developing an application using Azure Virtual Network and Azure App Service in a resource group for her company.

As part of the company's compliance requirements, it is necessary to evaluate if there is inappropriate resource usage within this resource group, such as the creation of a virtual machine outside of Azure App Service. 

Which solution should Charlotte choose?

• Azure Policy

• Azure Role

• Tags

• Lock

Answer explanation

Overall explanation

Option 1 is the correct answer. An Azure Policy is a document in JSON format that evaluates whether the Azure resources created comply with defined rules. Azure policies enforce your organization's standards and allow you to assess whether your Azure resources are in compliance. You can limit the scope of the usage by applying Azure policies to management groups or to resource groups.

 

Option 2 is incorrect. Azure roles are a function that manages permissions for resources, so you cannot limit the areas in which resources can be created. Azure role-based access control (Azure RBAC) helps you manage who has access to resources in Azure and what actions they are allowed to take on those resources. 

Option 3 is incorrect. Tags should be used for resource identification purposes only.   

Option 4 is incorrect. Locks are used to prevent changes to Azure subscriptions, resource groups, or resources, but cannot limit the space in which resources can be created.

 

[Reference] 

Overview of Azure Policy - Azure Policy | Microsoft Learn

Domain

Describe Azure management and governance

Select "Yes" if the following statement is true, otherwise select "No".    

 

During a private preview, Daniel noticed the cost of the Azure service was high. Will this cost decrease once the service is generally available?

• Sometimes

• Yes

• No

• Maybe

Answer explanation

Overall explanation

The correct answer is no.

Azure Private Preview services are always free. Private previews are typically the first release type for new Azure services. Customers test new services, provide feedback, and help Azure optimize new products. In general, a limited number of customers are invited to private previews. These customers are expected to provide feedback on the product.   

Once this private preview version of the service becomes generally available, it will become a full production service. Production services are fully backed by SLAs, customer support, and are ready to run in production workloads. The service will then have an associated cost.

 

[Reference]

Preview Terms Of Use | Microsoft Azure

Domain

Describe Azure management and governance

Chloe, Lucas, and Thomas are managing a project that involves Azure resources. They need to cut costs by removing unused Azure resources from their company's accounts.

Which Azure service should they consider removing?

• Private IP address

• Public IP address

• Virtual network

• Network interface

Answer explanation

Overall explanation

Option 2 is the correct answer. Public IP Address is a paid service. Static public IP addresses in the ARM deployment model and reserved IP addresses in the ASM deployment model will start billing the second hour after you create the IP address. Billing ends when you delete the IP address resource. Other public IP addresses start billing when the associated resource is launched. Billing for a public IP address ends when the associated resource is deleted or stopped and deallocated. Therefore, it is possible to stop charges by deleting the unused public IP addresses. 

 

Option 1 is incorrect. There is no charge for private IP addresses (dynamic/static).  

Option 3 is incorrect. Virtual networks in Azure are free. Each subscription can create up to 50 virtual networks across all regions.   

Option 4 is incorrect. Network interfaces are available free of charge. 

 

[Reference]

Pricing - Virtual Machine IP Address Options | Microsoft Azure

Domain

Describe Azure architecture and services

Select "Yes" if the following statement is true, otherwise select "No".    

 

By submitting a support request, Harper can merge two Azure subscriptions into one subscription.

• Sometimes

• Yes

• No

• Maybe

Answer explanation

Overall explanation

The correct answer is "no".

It is not possible to merge two subscriptions in Azure. Each subscription is a separate and unique entity that cannot be merged. Alternatively, you can transfer ownership of your subscription to another account. In this case, you need to manage two subscriptions with one account.

 

[Reference]

Add an existing Azure subscription to your tenant - Azure AD - Microsoft Entra | Microsoft Learn

Domain

Describe Azure management and governance