Revision Part 2 - Azure Architecture and Services

You are required to deploy an Artificial Intelligence (AI) solution in Azure. You want to make sure that you are able to build, test, and deploy predictive analytics for the solution.
Solution: You should make use of Azure Cosmos DB.
Does the solution meet the goal?

• Yes

• No

Answer explanation

• Azure Cosmos DB is excellent for scalable, globally distributed data storage, but it does not provide the tools necessary for building, training, testing, and deploying AI models.

• For AI and predictive analytics, services like Azure Machine Learning, Azure Databricks, and Azure Cognitive Services are the appropriate solutions.

Thus, the answer is B. No because Azure Cosmos DB is not the right solution for deploying AI and predictive analytics.

You are required to deploy an Artificial Intelligence (AI) solution in Azure. You want to make sure that you are able to build, test, and deploy predictive analytics for the solution.
Solution: You should make use of Azure Machine Learning Studio.
Does the solution meet the goal?

• Yes

• No

Answer explanation

Azure Machine Learning Studio is designed specifically to handle the needs of building, testing, and deploying machine learning models, including predictive analytics. It provides the necessary tools to create and operationalize AI models, making it the right choice for this solution.

Thus, the answer is A. Yes, because Azure Machine Learning Studio allows you to build, test, and deploy predictive analytics models effectively.

Your company's infrastructure includes a number of business units that each need a large number of various Azure resources for everyday operation. The resources required by each business unit are identical. You are required to sanction a strategy to create Azure resources automatically.
Solution: You recommend that the Azure API Management service be included in the strategy. Does the solution meet the goal?

• Yes

• No

Answer explanation

Azure API Management is not designed for automating the creation of Azure resources. It is focused on managing APIs, not on provisioning infrastructure resources like VMs, storage, or networks.

To meet the goal of automatically creating identical resources for business units, tools like ARM Templates, Azure Blueprints, and Azure Automation would be much more suitable.

Therefore, the answer is No, because Azure API Management is not the correct tool for automatically creating Azure resources.

Your company has virtual machines (VMs) hosted in Microsoft Azure. The VMs are located in a single Azure virtual network named VNet1.The company has users that work remotely. The remote workers require access to the VMs on VNet1. You need to provide access for the remote workers. What should you do?

• Configure a Site-to-Site (S2S) VPN.

• Configure a VNet-toVNet VPN.

• Configure a Point-to-Site (P2S) VPN.

• Configure DirectAccess on a Windows Server 2012 server VM.

• Configure a Multi-Site VPN

Answer explanation

• P2S VPN is specifically designed to provide secure, individual remote access to Azure Virtual Networks.

• Site-to-Site VPN and VNet-to-VNet VPN are for network-to-network connectivity.

• DirectAccess is meant for on-premises infrastructure, not Azure.

• Multi-Site VPN is for connecting multiple sites to a VNet, not for individual users.
  
  Why the other options are not correct:

  • 
    Configure a Site-to-Site (S2S) VPN:

    • A Site-to-Site (S2S) VPN is used for connecting on-premises networks (e.g., an office network or a data center) to an Azure Virtual Network. It is not suitable for remote users working from different locations over the internet. Instead, it connects entire networks.

  • 
    Configure a VNet-to-VNet VPN:

    • A VNet-to-VNet VPN connects two Azure VNets. This is typically used for connecting multiple VNets (e.g., in different regions) within Azure, not for connecting remote users to a VNet. So this is not the right solution for remote access.

  • 
    Configure DirectAccess on a Windows Server 2012 server VM:

    • DirectAccess is a solution for providing remote access to on-premises networks, not Azure VNets. It is a Microsoft technology primarily used for Windows-based remote clients to connect securely to on-premises networks. Although it could provide access to an on-premises infrastructure, it's not the best choice for remote workers connecting to an Azure VNet.

  • 
    Configure a Multi-Site VPN:

    • A Multi-Site VPN typically refers to the configuration that allows multiple locations or on-premises networks to connect to an Azure VNet, usually through Site-to-Site connections. It is not designed for individual remote users, but rather for connecting entire remote sites or offices to Azure. It would not be appropriate for remote workers connecting from their personal devices.

You are planning a strategy to deploy numerous web servers and database servers to Azure. This strategy should allow for connection types between the web servers and database servers to be controlled.
Solution: You include network security groups (NSGs) in your strategy.
Does the solution meet the goal?

• Yes

• No

Answer explanation

Yes, Network Security Groups (NSGs) are the correct solution for controlling the connections between web servers and database servers in Azure. They provide granular control over network traffic and can be used to enforce the required security rules.

Why NSGs meet the goal:

• The strategy requires controlling connections between web servers and database servers. Since NSGs can be used to define rules for inbound and outbound traffic based on IP addresses and ports, they provide a robust mechanism to meet the goal.

What NSGs do not do:

• NSGs cannot control application-level traffic (e.g., HTTP/HTTPS or database queries at the protocol level), but they can control network-level traffic, such as allowing or blocking access between web and database servers at the network level (IP and port).

You are planning a strategy to deploy numerous web servers and database servers to Azure. This strategy should allow for connection types between the web servers and database servers to be controlled.
Solution: You include a local network gateway in your strategy.
Does the solution meet the goal?

• Yes

• No

Answer explanation

A local network gateway is a component used to represent the on-premises network in Azure. It is typically part of the Site-to-Site (S2S) VPN or ExpressRoute configuration, and it is used to establish secure communication between an on-premises network and an Azure virtual network (VNet).

However, the goal in this scenario is to control the connection types between web servers and database servers in Azure. To achieve this, you need to manage network traffic within the Azure environment (between resources such as web servers and database servers), not between Azure and an on-premises network.

Overall: The use of a local network gateway is primarily for establishing a VPN or ExpressRoute connection between Azure and an on-premises network, not for managing traffic between resources within Azure. To meet the goal of controlling connection types between web servers and database servers, you should use Network Security Groups (NSGs) instead.

You plan to provision Infrastructure as a Service (IaaS) resources in Azure. Which resource is an example of IaaS?

• an Azure web app

• an Azure virtual machine

• an Azure logic app

• an Azure SQL database

Azure Cosmos DB is an example of a _____________________________________ offering.

• Platform as a Service (PaaS)

• Infrastructure as a Service (IaaS)

• Serverless

• Software as a Service (SaaS)

Answer explanation

Azure Cosmos DB is a Platform as a Service (PaaS) offering because it is a fully managed database service designed to provide globally distributed, multi-model database solutions. As a PaaS, it abstracts away the underlying infrastructure and provides features like automatic scaling, high availability, and low-latency access to data without the user needing to manage the physical servers or database management software directly.

Yes or No

1. With software as a service (SaaS), you must apply software updates
2. With infrastructure as a service (IaaS), you must install the software that you want to use.
3. Azure Backup is an example of platform as a service (PaaS).

• 1. Yes

  2. No

  3. Yes

• 1. Yes

  2. Yes

  3. No

• 1. No

  2. Yes

  3. Yes

• 1. No

  2. Yes

  3. No

• 1. Yes

  2. Yes

  3. Yes

Answer explanation

• No – With Software as a Service (SaaS), the service provider manages the application and software updates. You do not have to apply software updates yourself; they are automatically handled by the SaaS provider.

• Yes – With Infrastructure as a Service (IaaS), you are responsible for installing and managing the software you want to use on the virtual machines (VMs) or other infrastructure resources. IaaS provides the virtualized hardware (like VMs, networking, and storage), but you need to handle the software installation and maintenance.

• No – Azure Backup is an example of a Software as a Service (SaaS) offering, not a Platform as a Service (PaaS). It provides a managed service to back up data without needing to manage the underlying infrastructure, which is a characteristic of SaaS. PaaS typically refers to services that offer more control over the application platform (like app services, databases, etc.).

Yes or No

1. You can create a resource group inside of another resource group.
2. An Azure virtual machine can be in multiple resources groups.
3. A resource group can contain resources from multiple Azure regions.

• 1. No

  2. Yes

  3. Yes

• 1. No

  2. Yes

  3. No

• 1. Yes

  2. Yes

  3. No

• 1. No

  2. No

  3. Yes

• 1. Yes

  2. No

  3. Yes

Answer explanation

• No – You cannot create a resource group inside another resource group in Azure. A resource group is a top-level container for managing Azure resources, but it cannot be nested within another resource group.

• No – An Azure virtual machine (VM) can only belong to one resource group at a time. However, you can move resources between resource groups, but they cannot be part of multiple resource groups simultaneously.

• Yes – A resource group can contain resources from multiple Azure regions. While a resource group is a logical container, the resources within it can be located in different regions. For example, you could have a storage account in one region and a virtual machine in another, all within the same resource group.