AZ 900 Practice set 2 Part 4

Zoey is setting up security for her company's data. Select "Yes" if the following statement is true, otherwise select "No".  

Azure Information Protection can encrypt Azure storage accounts.

• Maybe

• Yes

• No

• Sometimes

Answer explanation

Overall explanation

The correct answer is "No".

Azure storage accounts contain Azure storage data objects such as blobs, files, queues, tables, and disks that cannot be encrypted by Azure Information Protection.  Azure uses its own encryption service to encrypt data at rest in Azure storage accounts.

 

[Reference] 

Azure Data Encryption-at-Rest - Azure Security | Microsoft Learn

Domain

Describe Azure architecture and services

Select "Yes" if the following statement is true, otherwise select "No".  

 

Lucas believes that Azure Information Protection can encrypt network traffic.

• Sometimes

• Maybe

• Yes

• No

Answer explanation

Overall explanation

The correct answer is "No".

Azure Information Protection cannot encrypt network traffic. Azure Information Protection (AIP) enables organizations to apply labels to content in order to discover, classify, and protect documents and emails. Azure Information Protection does not have the ability to encrypt network traffic. TLS configuration is required to encrypt network traffic.   

 

[Reference] 

Azure TLS Certificate Changes | Microsoft Learn

Domain

Describe Azure architecture and services

Azure has different SLAs for different services.

What will Azure do if the SLA is not met?

For example, Ethan's company relies on Azure for their cloud services.

• Azure will provide users with credits based on actual utilization rate.

• You can claim a refund at the end the SLA measurement.

• Discounts will be automatically applied based on the actual utilization rate.

• Automatic refunds will be given according to the actual utilization rate.

Answer explanation

Overall explanation

Option 1 is the correct answer. If the Azure service provided to the user fails and the SLA is not met, Microsoft will provide the user with a credits based on the amount the service level agreement (SLA) that was not met (i.e. the difference between expected vs actual SLA). SLA credits from Microsoft are based on the affected service. For example, if a customer has an Office 365 suite and only experiences a SharePoint outage, SLA credits will only be approved for SharePoint uptime.

 

Option 2 is incorrect. Instead of surcharges or refunds, users can request credits based on the SLA difference.  

Option 3 is incorrect. Discounts are not automatically applied.

Option 4 is incorrect. Credits are provided which will increase uptime rather than being given as automatic refunds.

 

[Reference]

Service Level Agreements - Home | Microsoft Azure

Domain

Describe Azure management and governance

Mira needs to implement a simple application that uses Azure to automatically send email notifications.

Choose the two best solutions for that.

• API Management

• Azure Functions

• Azure Marketplace server image

• Azure Logic App

Answer explanation

Overall explanation

Option 2 is the correct answer. Azure Functions is a serverless platform that runs program code without any server configuration. Using this, you can develop a simple application that executes mail transmission.

Option 4 is the correct answer. Azure Logic Apps is a workflow generation solution that allows you to automate workflows without code. Using this, you can easily implement an application that automatically sends e-mail notifications.

Option 1 is incorrect. Azure API Management is a fully managed API gateway service. This allows you to manage APIs in bulk. It is not possible to create applications that perform email processing with this.   

Option 3 is incorrect. Server images are predefined configurations of Azure virtual machines that can host applications based on user needs. This will not allow you to create an application. 

 

[Reference] 

Getting started with Azure Functions | Microsoft Learn

Overview - Azure Logic Apps | Microsoft Learn

Domain

Describe Azure architecture and services

Ella and Harper are working on a project about Azure regions. Select two entities that can use Azure Government.

• United States government agencies

• International organizations

• U.S. Government Contractors

• EU Government contractors

Answer explanation

Overall explanation

Options 1 and 3 are correct. Microsoft Azure Government is a cloud service that meets security and compliance requirements for US government agencies or their partners. It is used by US government agencies and their partners to build mission-critical workloads on Azure.

To ensure that Azure provides the highest levels of security and compliance, Azure Government only uses physically isolated data centers and networks located in the United States. 

Azure Government enhances security through contractual commitments to store customer data in the United States and by limiting the potential access of customer data systems to US Persons. Azure Government is accessible to U.S. federal, state, and local governments or their partners.

 

[Reference]

Azure for US Government | Microsoft Azure

Domain

Describe Azure architecture and services

Select "Yes" if the following statement is true, otherwise select "No".  

 

Samuel is considering using IaaS for his startup because one of the benefits is that users can flexibly use infrastructure on demand.

• Yes

• Sometimes

• Maybe

• Rarely

Answer explanation

Overall explanation

The correct answer is "yes". 

The advantage of IaaS is that you can build, delete, and expand infrastructure as much as needed on demand. IaaS is a cloud service that makes it possible to use infrastructure  remotely such as computing and communication lines as a service on the Internet.

Domain

Describe cloud concepts

Select "Yes" if the following statement is true, otherwise select "No".

 

Alexander finds that flexibility in infrastructure management is one of the benefits of using IaaS on the Azure cloud.

• Maybe

• No

• Sometimes

• Yes

Answer explanation

Overall explanation

The correct answer is "No".

In IaaS type clouds, physical infrastructure management cannot be performed by the user. As a result, infrastructure management is inflexible, and users have no responsibility for this. IaaS infrastructure management is performed by the vendor.

 

[Reference]

Shared responsibility in the cloud - Microsoft Azure | Microsoft Learn

Domain

Describe cloud concepts

Select "Yes" if the following statement is true, otherwise select "No".       

 

Daniel is considering using IaaS for his startup. One of the advantages of IaaS is that it is possible to entrust security measures to the cloud provider.

• Sometimes

• No

• Maybe

• Yes

Answer explanation

Overall explanation

The correct answer is "No".

Users need to take responsibility for their own security measures for applications built on IaaS, such as with virtual machines.

Your application or service's security responsibilities might vary depending on the Azure service you use. However, users are always required to apply appropriate security measures to their services.

 

[Reference] 

Introduction to Azure security | Microsoft Learn

Domain

Describe cloud concepts

Select "Yes" if the following statement is true, otherwise select "No".   Emily cannot move her project resources between regions.

• Yes

• No

• Maybe

• Sometimes

Answer explanation

Overall explanation

The correct answer is "No". 

Azure resources can be moved to another subscription or another resource group in the same subscription. You can also move resources to another region. You can use the Azure portal, Azure PowerShell, Azure CLI, or REST API to move these resources. You can also use Azure Resource Mover to move your resources to another region or the Azure global infrastructure capabilities to seamlessly move resources to the region that best meets your needs.

 

[Reference] 

Move Azure resources across resource groups, subscriptions, or regions. - Azure Resource Manager | Microsoft Learn

Azure Resource Mover – Seamlessly move your resources | Microsoft Azure

Domain

Describe Azure management and governance

Select "Yes" if the following statement is true, otherwise select "No".      

 

Emma and Ethan are discussing cloud infrastructure. Ethan says that a region with availability zones is made up of two or more data centers. Is Ethan correct?

• Yes

• Sometimes

• Maybe

• No

Answer explanation

Overall explanation

The correct answer is "yes".

Regions, including Availability Zones, are made up of at least two data centers. Azure operates in multiple datacenters around the world. These data centers are grouped into geographical regions, such as "West US", "North Europe", and "Southeast Asia". 

Regions with availability zones have multiple data centers to ensure redundancy and availability. This gives users flexibility in designing their applications. You can create VMs in locations closest to your users, or specify regions that meet your legal, compliance, tax, and other objectives.  However, there are also special regions that do not have Availability Zones. Such a region may consist of only one data center.

 

[Reference] 

Choose the Right Azure Region for You | Microsoft Azure

Domain

Describe Azure architecture and services