AZ900 Practice set2 Part7

Scarlett and Mia are setting up a new office and need to ensure the cloud requires defense in depth. Choose the appropriate security element in the physical security layer.

• MFA

• Software updates and patching

• Installation of surveillance cameras

• Motion sensors

Answer explanation

Overall explanation

Option 3 is the correct answer. Surveillance cameras will physically secure access to buildings such as data centers. These physical layers of security allow you to control access to computing hardware in your data center.

 

 

[Defense-in-depth strategy ]

• In the computing layer, virtual machine access protection is used.

• In the physical security layer, security that protects the computing hardware within the data center is used.

• In the identity and access layers, access management to the infrastructure is used.

• In the perimeter layer, DDoS protection is used to filter large-scale attacks before it can cause a denial of service to users.

• In the network layer, communication between resources is restricted through segmentation and access control.

• In the application layer, verification that the application is secure and free of security vulnerabilities is done.

• In the data layer, access control to business and customer data is protected.

Domain

Describe Architecture management and governance

Select "Yes" if the following statement is true, otherwise select "No".   

 

Priya, who has the Owner role, can transfer ownership of an Azure subscription.

• Maybe

• Yes

• Sometimes

• No

Answer explanation

Overall explanation

The correct answer is "No".

You must be an administrator to transfer ownership of a subscription. Only the billing administrator of an account can transfer ownership of a subscription.  The billing administrator is a user who has been given permission to manage billing for an account. the billing administrator has permission to access billing information in their Azure portal, as well as perform various billing-related tasks such as creating subscriptions, viewing and paying invoices, and updating payment methods.   

 

[Reference]

Transfer billing ownership of an MOSP Azure subscription - Microsoft Cost Management | Microsoft Learn

Domain

Describe Azure management and governance

Select "Yes" if the following statement is true, otherwise select "No".  

 

Isabella can convert her free trial Azure subscription to a regular Microsoft Online Services Program (i.e pay-as-you-go Azure subscription).

• Yes

• Maybe

• No

• Sometimes

Answer explanation

Overall explanation

The correct answer is "yes".

A user can change their Azure free trial account to a pay-as-you-go account. An Azure free account gets USD200 credit for most Azure services for 30 days. Within 30 days of registration, or when the credits are exhausted, whichever comes first, the user must upgrade to a pay-as-you-go subscription in order to continue. This allows you to continue using your Azure free account and the selected free services for the duration of the term.

 

[Reference]

Azure Free Trial | Microsoft Azure

Domain

Describe En-Us management and governance

Select "Yes" if the following statement is true, otherwise select "No".  

 

Benjamin's monthly budget limits for his cloud services are fixed and cannot be changed.

• No

• Sometimes

• Maybe

• Yes

Answer explanation

Overall explanation

The correct answer is "yes".

Azure spending limit is a function to prevent unexpected spending by stopping usage when the credit amount is exceeded. If your usage reaches the amount that depletes your spending limit, your service will be disabled for the remainder of the billing period.  Azure spending limit is equivalent to the number of credits.

The Azure spending limit amount cannot be changed. For example, if you signed up for an Azure free account, your spending limit is $200 and you can't change it to $500. However, usage restrictions can be removed. This limit prevents most types of spending.

 

[Reference]

Azure spending limit - Microsoft Cost Management | Microsoft Learn

Domain

Describe Azure management and governance

Sophia's company is planning to migrate from an on-premises environment to Azure. It is necessary to proceed with application development using Docker as the development environment.

Which is the best solution for that? Please select two.

• Azure App Service

• Azure Container Instances

• Azure Functions

• Azure virtual machine

Answer explanation

Overall explanation

Option 1 is correct. Azure App Service is a fully managed platform for building, deploying and scaling web apps. You can configure custom containers to run in Azure App Service. 

Option 2 is correct. Azure Container Instances is a service that runs Docker containers on demand within your Azure environment. Azure Container Instances can run Docker inside isolated containers without orchestration. It allows you to run event-driven applications, deploy quickly from your container development pipeline, process data and builds, and run jobs.  

 

Option 3 is incorrect. Azure Functions is an event-driven serverless computing platform that runs applications with code, without infrastructure. You can use it to develop serverless applications.     

Option 4 is incorrect. Azure Virtual Machines (VMs) is an IaaS service that creates dedicated computing resources in minutes. Configure the server to be used like a physical desktop or server computer.

 

[Reference]

Configure a custom container - Azure App Service | Microsoft Learn

Azure Container Instances | Microsoft Azure

Domain

Describe En-Us management and governance

Isabella's company plans to migrate an on-premises SQL Server database using the Common Language Runtime (CLR) to an Azure environment.

 

Choose a method that also minimizes costs during migration and operations.

• Migrate the SQL server database to Azure SQL Managed Instance.

• Migrate the SQL server database to Azure SQL Database.

• Migrate the SQL server database to a virtual machine.

• Migrate the SQL Server database to Azure Functions.

Answer explanation

Overall explanation

Option 1 is the correct answer. Azure SQL Database is the easiest way to use SQL Server on Azure. However, in the scenario we have a requirement of a SQL Server database utilizing the Common Language Runtime (CLR). Common Language Runtime (CLR) is not available in Azure SQL Database. Therefore, it is necessary to consider this option.

When migrating a Common Language Runtime (CLR) enabled SQL Server database to Azure, Azure SQL Managed Instance offers the best compatibility and lowest migration cost. SQL Managed Instance comes with near 100% compatibility with the latest SQL Server (Enterprise Edition) database engine. 

 

Option 2 is incorrect. Azure SQL Database is a PaaS type service of SQL Server. The easiest way to use SQL Server is usually Azure SQL Database. However, in this scenario we have a requirement of a SQL Server database utilizing the Common Language Runtime (CLR). Common Language Runtime (CLR) is not available in Azure SQL Database. 

Option 3 is incorrect. It is possible to install the SQL server database on a virtual machine and reproduce the same SQL server database as the on-premises environment. However, it does not meet the requirements due to high migration and operating costs. 

Option 4 is incorrect. Database cannot be built in Azure Functions.

 

[Reference] 

What is Azure SQL Managed Instance? - Azure SQL Managed Instance | Microsoft Learn

Domain

Describe Azure management and governance

During a class discussion, Sofia asked how many copies of data are stored in Locally Redundant Storage (LRS) in Azure Storage Accounts?

• 23

• 3

• 4

• 1

Answer explanation

Overall explanation

Option 2 is the correct answer. Azure Storage deploys storage by specifying a region. The region where the storage is deployed is called the primary region. By default, Azure Storage replicates (copies) data in the primary region to increase data redundancy. There are two methods for this:

 

・Local Redundant Storage (LRS)

Within one physical location in the primary region, the storage copies data synchronously three times.

 

・Zone Redundant Storage (ZRS)

Storage copies data synchronously across three Azure Availability Zones in the primary region.

 

Either way, the storage in your Azure Storage account will copy the data three times.

 

[Reference]

Data redundancy - Azure Storage | Microsoft Learn

Domain

Describe Azure management and governance

Select "Yes" if the following statement is true, otherwise select "No".

 

Scarlett and Aarav noticed that pay-as-you-go pricing reduces your overall costs because you pay only for the capacity you use.

• No

• Sometimes

• Rarely

• Yes

Answer explanation

Overall explanation

"Yes" is the correct answer.

Azure saves you money with competitive pay-as-you-go pricing. In the pay-as-you-go system, you pay for the amount actually used, so there is no initial cost at all. In addition, overall costs can be reduced by paying only usage fees compared to building infrastructure that would normally be a capital expense in an on-premises environment. 

 

[Reference]

Pay-As-You-Go | Microsoft Azure

Domain

Describe En-Us management and governance

Select "Yes" if the following statement is true, otherwise select "No".

 

Owen and Ella noticed that serverless services such as Azure Functions are billed on a pay-as-you-go basis.

• No

• Yes

• Rarely

• Sometimes

Answer explanation

Overall explanation

"Yes" is the correct answer.

Serverless services such as Azure Functions are based on a pay-as-you-go plan because you are charged for the execution time of the computing resources used. The Azure Functions Consumption plan charges based on resource usage and number of executions per second. 

Azure Functions pricing includes 1 million monthly requests and 400,000 GB of resource consumption per subscription at no charge, pay-as-you-go pricing across all function apps in that subscription. The Azure Functions Premium plan bills per second based on the number of vCPUs and GB consumed by premium functions.

 

[Reference]

Pricing - Functions | Microsoft Azure

Domain

Describe Azure architecture and services

Priya's company is considering moving from an on-premises environment to the public cloud. What are the typical cost benefits they might experience?

• Both capital expenses (CapEx) and operating expenses (OpEx) go down.

• Operating expenses (OpEx) go down.

• Capital expenses (CapEx) go down.

• Lower capital expenses (CapEx) but higher operating expenses (OpEx).

Answer explanation

Overall explanation

Option 1 is the correct answer.

Public cloud services like Azure offer the flexibility to align system costs with capital expenses (CapEx) to operational expenses (OpEx). For example, equipment costs such as data center purchases of physical servers are usually capital expenses, but by using virtual servers using Azure, it is possible to convert them into operating expenses. 

There are no fixed costs in the public cloud, and there are no costs if you don't use it. All expenses are treated as operating expenses (OpEx). In addition, it is said that the operation expense is generally reduced because it is a pay-as-you-go system  in which you are charged based on the amount used.

 

[Reference]

Pay-As-You-Go | Microsoft Azure

Domain

Describe cloud concepts