WorksheetsZA-TDOJ
Total questions: 91
Worksheet time: 49mins
Which service enables cloud architects and central information technology groups to define a repeatable set of Azure resources that implements and adheres to an organization's standards, patterns, and requirements?
Azure Blueprints
Compliance Manager
Azure Monitor
Azure Advisor
You are migrating all of the data from your on-premises data center to Azure. You have to ensure that your Azure environment adheres to the regional compliance requirements of the company.
What service should you use?
Service Trust Portal
Azure Active Directory
Azure Advisor
Azure Marketplace
A company has a resource group named TutorialsDojoRG and an Azure virtual network named TutorialsDojoVNET. A new Azure policy has been assigned to TutorialsDojoRG stipulating that any virtual network resource type is not allowed in the resource group. The existing TutorialsDojoVNET virtual network will__
be automatically deleted after a few minutes.
be deleted after 24 hours.
continue to work properly
be moved to the default resource group
Select the correct answer from the drop-down list of options. Each correct selection is worth one point.
_____ is a security model that protects organizations by managing and granting access based on the continual verification of identities, devices and services.
Zero Trust
Microsoft Azure Well-Architected Framework
Shared responsibility model
Service Trust Portal
Your on-premises Active Directory forest currently has 3000 users.
You plan to decommission the on-premises server that hosts the Active directory. You need to recommend a solution to migrate the users the quickest way to Azure Active Directory with minimal impact on users.
What should you recommend?
Manually create the users in Azure Active Directory.
Implement Azure Multi-Factor Authentication.
Migrate the on-premises Active Directory server to Azure virtual machines.
Sync the on-premises Active Directory to Azure Active Directory using AD connect.
You are tasked to monitor your on-premises identity infrastructure and ensure a reliable connection to Office 365 and Microsoft Online Services.
What service should you use?
Azure Application Gateway
Azure App Service
Azure Application Insights
Azure AD Connect Health
Select the correct answer from the drop-down list of options.
The process of verifying the credentials of the user is:___
Authorization
Synchronization
Federation
Authentication
What service provides security tokens that you can use for the authentication flow of your cloud-based applications?
Azure Storage account
Microsoft Defender for Cloud
Azure Key Vault
Azure Active Directory
Which of the following are considered vertical scaling in a cloud environment?
Increase the number of virtual machines
Provision additional containers
Increase the CPU and RAM of a virtual machine
Provision an additional Azure dedicated host
A company needs to configure its Azure Active Directory to automatically prompt a user to change the password if the user signs in from an anonymous IP address.
Which Azure service should you use?
Azure AD Privileged Identity Management
Azure Service Health
Microsoft Defender for Identity
Azure Active Directory Identity Protection
What service enables you to correlate trace events from multiple Azure VMs and other resources into a centralized repository?
Azure Event Hubs
Azure Repos
Azure Monitor
Azure Resource Manager
Which service analyzes your resource configuration and usage telemetry and then recommends solutions that can help you improve the cost-effectiveness, performance, reliability, and security of your Azure resources?
Compliance Manager
Azure Information Protection
Azure Resource Manager
Azure Advisor
Note: This item is part of a series of questions with the exact same scenario but with a different proposed answer. Each one in the series has a unique solution that may, or may not, comply with the requirements specified in the scenario.
Your company plans to deploy several virtual machines that will host its business-critical application to Azure.
You need to recommend a solution to ensure that if a single data center fails, the application will not be affected.
Solution: Deploy virtual machines to a scale set.
Does this meet the goal?
YES
NO
Which cloud computing term represents the ability of a system to recover from failures and continue to function?
High availability
Reliability
Scalability
Agility
Note: This item is part of a series of questions with the exact same scenario but with a different proposed answer. Each one in the series has a unique solution that may, or may not, comply with the requirements specified in the scenario.
Your company stores its media assets in a storage account located in the Singapore region.
You need to recommend a solution to ensure that if the Singapore region fails, the data can still be accessed. The solution should also be cost-effective.
Solution: Configure your storage account to use zone-redundant storage (ZRS) option.
Does this meet the goal?
YES
NO
Note: This item is part of a series of questions with the exact same scenario but with a different proposed answer. Each one in the series has a unique solution that may, or may not, comply with the requirements specified in the scenario.
Your company stores its media assets in a storage account located in the Singapore region.
You need to recommend a solution to ensure that if the Singapore region fails, the data can still be accessed. The solution should also be cost-effective.
Solution: Configure your storage account to use geo-redundant storage (GRS) option.
Does this meet the goal?
YES
NO
Which of the following is a serverless compute service that lets you run event-triggered code without having to explicitly provision or manage infrastructure?
Azure Virtual Machines
Azure Container Instances
Azure Logic Apps
Azure Functions
If a resource group has been applied with a CanNotDelete lock, then__
The administrator can directly delete it without removing the lock.
The administrator must remove the lock first before it can be deleted.
The administrator must modify the associated Azure Policy first before it can be deleted.
The administrator must delete the associated CanNotDelete tag first before it can be deleted.,
An organization has successfully migrated its SQL Database to Azure and they want to prevent other users in the organization from accidentally deleting or modifying critical resources.
What Azure feature should they use?
Azure Policy
Azure Active Directory
Azure role-based access control
Azure Resource Manager Locks
A company has a Windows Server running in an Azure Virtual Machine hosted in the South Central US Azure region. You have to view the planned maintenance, incidents, and other service outages in Azure that may affect your virtual machine and other related services.
What service should you use to accomplish the above requirement?
Azure Service Health
Azure Advisor
Azure Service Fabric
Azure Monitor
A company has several Azure resources across different regions. The support engineers need to manage the Azure cloud environments of the company using the Azure CLI.
Which two tools below can the engineers use to install and run the Azure CLI?
Azure AD Seamless SSO
Azure Storage Explorer
Azure Resource Explorer
Windows Command Prompt (CMD)
Windows PowerShell
Which Azure service is application insights a feature of?
Azure Service Health
Azure Advisor
Azure Resource Manager templates
Azure Monitor
Choose which is true. (2 Trues)
With Azure Service Health, you can view the health of all the Azure resources that you’re using and other Azure services across all Azure regions.
You can create an alert rule using Azure Service Health to notify you if a specific Azure service experienced an outage.
You can ensure that your Azure Virtual Machine will have 100% availability using Azure Service Health, even in a service failure event.
In the Azure Shared Responsibility Model, whose responsibility is it to maintain the application in an Azure virtual machine?
Azure
Customer
Both Azure and the customer
Neither Azure nor the customer
Which is true? (only 1)
The consumption-based model requires customers to manage their own infrastructure.
The consumption-based model is considered to be capital expenditures (CapEx)
Microsoft Azure operates on a consumption-based model.
Choose which is true (3 Trues).
With Microsoft Azure, you don’t pay for the physical infrastructure, the electricity, the security, or anything else associated with maintaining a datacenter. Instead, you pay for the IT resources you use. If you don’t use any IT resources this month, you don’t pay for any IT resources.
Hence, the correct statement is: Microsoft Azure operates on a consumption-based model.
The statement that says: The consumption-based model is considered to be capital expenditures (CapEx) is incorrect because the consumption-based price is operational expenditure (OpEx).
The statement that says: The consumption-based model requires customers to manage their own infrastructure is incorrect because one of the benefits of a consumption-based model is that customers do not need to purchase and manage the costly infrastructure that customers might not use to its fullest potential.
If you edit the Subscription’s IAM and add an Owner role assignment to John’s user, he can now inherit the Contributor’s Role, including the resources.
If you edit the Subscription’s IAM and add a Reader role assignment to John’s user, he can now view all the resources, but not make any changes.
If you edit the Subscription’s IAM and add a Virtual Machine Contributor role assignment to John’s user, he can now manage virtual machines but not access them, and not the virtual network or storage account they're connected to.
Which Azure service allows you to use just-in-time (JIT) VM access?
Azure Monitor
Azure Information Protection
Microsoft Sentinel
Microsoft Defender for Cloud
When you store data in an Archive access tier, the data ________.
must be rehydrated first before you can access the data
can be accessed at any moment
can not be deleted until the 180th day
can not be copied to the hot access tier
Note: This item is part of a series of questions with the exact same scenario but with a different proposed answer. Each one in the series has a unique solution that may, or may not, comply with the requirements specified in the scenario.
Your company is currently hosting a web application in an Azure virtual machine.
The application is processing mission-critical workloads.
They plan to reduce the costs by migrating it to a new instance.
Solution: Purchase a reserved instance.
Does the solution meet the goal?
YES
NO
Note: This item is part of a series of questions with the exact same scenario but with a different proposed answer. Each one in the series has a unique solution that may, or may not, comply with the requirements specified in the scenario.
Your company is currently hosting a web application in an Azure virtual machine.
The application is processing mission-critical workloads.
They plan to reduce the costs by migrating it to a new instance.
Solution: Purchase a reserved capacity.
Does the solution meet the goal?
YES
NO
Note: This item is part of a series of questions with the exact same scenario but with a different proposed answer. Each one in the series has a unique solution that may, or may not, comply with the requirements specified in the scenario.
Your company is currently hosting a web application in an Azure virtual machine.
The application is processing mission-critical workloads.
They plan to reduce the costs by migrating it to a new instance.
Solution: Launch a new Azure Spot Virtual Machine
Does the solution meet the goal?
YES
NO
Choose which is false.
Azure virtual machines are billed on a per-hour basis.
When you delete a virtual machine in Azure, by default, any disks that are attached to the VM are deleted.
Disks attached to stopped virtual machines do not incur costs.
Estimate the costs of Azure products.
Azure Pricing Calculator
Azure Hybrid Benefit
Azure Reservations
Azure Total Cost of Ownership (TCO) Calculator
Maximizes the value of your existing on-premises Windows Server and/or SQL Server license in Azure.
Azure Pricing Calculator
Azure Hybrid Benefit
Azure Reservations
Azure Total Cost of Ownership (TCO) Calculator
Significantly reduce compute costs with one-year or three-year terms on Windows and Linux virtual machines (VMs).
Azure Pricing Calculator
Azure Hybrid Benefit
Azure Reservations
Azure Total Cost of Ownership (TCO) Calculator
Estimate the cost savings you can realize by migrating your workloads to Azure.
Azure Pricing Calculator
Azure Hybrid Benefit
Azure Reservations
Azure Total Cost of Ownership (TCO) Calculator
Which Azure service provides recommendations on how you can optimize and improve the efficiency of your workloads by identifying idle and underutilized resources?
Azure Blueprints
Azure Portal
Azure Monitor
Azure Cost Management + Billing
Choose which is false.
Multiple resource groups in an Azure subscription will incur additional costs.
Data inbound to Azure from an on-premises network over ExpressRoute will be charged at standard data transfer rates.
Data outbound from Azure to on-premises network over a VPN connection is free.
Which Azure service can you use to send alerts when the CPU utilization of a virtual machine reaches 80%?
Azure Bastion
Azure Monitor
Microsoft Defender for Cloud
Azure Service Health
Your company is planning to migrate its TDPortalApp to Azure. You need a solution that will maintain virtual machine connectivity to at least one instance with a 99.95% uptime.
Solution: Deploy one VM instance in one Availability Set.
Does this meet the goal?
YES
NO
Which cloud computing term refers to the ability to increase the number of virtual machines in response to a steep jump in demand?
Vertical scaling
Horizontal scaling
High availability
Reliability
What are the benefits of Microsoft Azure?
(Choose 3)
Resources can be provisioned in minutes.
You have full control over your own physical servers.
Costs are unpredictable
You can stop paying for resources that are no longer needed.
Switch from capital expenditure (CapEx) to operational expenditure (OpEx).
A company wants to migrate to the cloud. The requirement is to have a VPN connection to connect your on-premises network to an Azure virtual network over an IPsec/IKE (IKEv1 or IKEv2) VPN tunnel.
What is the most suitable type of VPN connection that you should use?
Point-to-Site VPN connection
Site-to-Site VPN Connection
VNet peering connection
ExpressRoute Connection
Note: This item is part of a series of questions with the exact same scenario but with a different proposed answer. Each one in the series has a unique solution that may, or may not, comply with the requirements specified in the scenario.
Your company plans to deploy several virtual machines that will host its business-critical application to Azure.
You need to recommend a solution to ensure that if a single data center fails, the application will not be affected.
Solution: Deploy virtual machines to multiple resource groups with the same availability zone.
Does this meet the goal?
YES
NO
What Azure service should you use if you want your application to have a higher level of availability and to evenly distribute internal traffic across virtual machines within a VNET?
Private Load Balancer
Public Load Balancer
Application Gateway
Network Security Group
A news agency company plans to migrate its WordPress application to Azure. As a Support Engineer of the company, you have to suggest a service that can monitor your application, automatically detect performance anomalies, diagnose issues, and understand user behavior.
Which Azure service can do this?
Azure Application Gateway
Azure App Service
Azure Application Insights
Azure AD Connect
Which Azure Service enables various types of Azure resources, such as Azure Virtual Machines (VM), to securely communicate with each other, the Internet, and on-premises networks?
Microsoft Sentinel
Azure Virtual Network
Public IP
Azure Content Delivery Network (CDN)
Which Azure feature enables organizations to manage the access, policies, and compliance of their resources in Azure across multiple subscriptions.
Resource Groups
Azure Support Plans
Azure Policies
Management Groups
Object store for text and binary data.
Azure Blob
Azure Disks
Azure Table
Azure Files
Block-level storage volumes.
Azure Blob
Azure Disks
Azure Table
Azure Files
Structured NoSQL data in the cloud.
Azure Blob
Azure Disks
Azure Table
Azure Files
Shard access that utilizes Server Message Block (SMB) protocol.
Azure Blob
Azure Disks
Azure Table
Azure Files
Your colleague is working on a project and informed you that he needs RDP access to the server hosted on Azure. He gave you his workstation’s IP address.
Where should you whitelist his IP address?
Load Balancer
Application Security Group
Activity Log
Network Security Group
You plan to deploy a WordPress website to Azure. You need to recommend an Azure solution that will host the website without managing the infrastructure.
What service should you recommend?
Azure Logic Apps
Azure DevOps
Azure App Service
Azure Virtual Machine
You were tasked to look for a document sharing solution that you can map or mount in your on-premises Windows servers. What Azure service should you use?
Azure Cosmos DB
Azure Managed Disks
Azure Files
Azure Blob
You plan on migrating several virtual machines to Azure for your frontend and backend applications. There is a compliance requirement wherein the back-end servers must be on a separate network segment.
What Azure solution should you implement?
One virtual network each for frontend and backend servers
One subscription each for frontend and backend servers
One resource group each for frontend and backend servers
One network security group each for frontend and backend servers
How many copies of data will be maintained by the Azure storage account that uses geo-zone-redundant storage (GZRS) at the minimum?
2 copies
3 copies
6 copies
9 copies
A company is migrating its TDPortal to Azure. The website is accessed by users worldwide for video streaming services. You need to recommend a solution that will provide reduced load times and high transfer speeds.
What Azure service should you recommend?
Blob Storage
Network Security Groups
Load Balancers
Azure Content Delivery Network
An organization’s patient management system migrated its application that handles patient records to Azure. Due to compliance requirements, you need to store terabytes worth of records for more than 10 years. The records are rarely accessed and can accommodate a delay in retrieval.
What storage solution would best fit the requirements?
Store the records to Azure Blob Storage - Cool Tier
Store the records in a virtual machine
Store the records to Azure Blob Storage - Archive Tier
Store the records to Azure Blob Storage - Hot Tier
Global load balancing and site acceleration service.
Azure Front Door
Azure Traffic Manager
Application Gateway
Azure Load Balancer
A DNS-based traffic load balancer.
Azure Front Door
Azure Traffic Manager
Azure Traffic Manager - A DNS-based traffic load balancer.
Application Gateway
Azure Load Balancer
Layer 7 regional load balancer.
Azure Front Door
Azure Traffic Manager
Application Gateway
Azure Load Balancer
Layer 4 regional load balancer.
Azure Front Door
Azure Traffic Manager
Application Gateway
Azure Load Balancer
Note: This item is part of a series of questions with the exact same scenario but with a different proposed answer. Each one in the series has a unique solution that may, or may not, comply with the requirements specified in the scenario.
Your company plans to deploy several virtual machines that will host its business-critical application to Azure.
You need to recommend a solution to ensure that if a single data center fails, the application will not be affected.
Solution: Deploy virtual machines to multiple subscriptions.
Does this meet the goal?
YES
NO
What service enables you to evaluate regulatory compliance as well as improve the compliance posture of your Azure environment?
Azure Advisor
Azure Blueprints
Microsoft Defender for Cloud
Azure Policy
Which service can you use to create and store TLS/SSL certificates?
Azure Key Vault
Microsoft Defender for Cloud
Azure Storage
Azure Artifacts
A company has hundreds of virtual machines that are dispersedly hosted across multiple virtual networks and subscriptions. You are tasked to limit the amount of outbound HTTPS traffic to a specified list of fully qualified domain names (FQDN) as well as limit the inbound traffic to the virtual networks.
What must be done to satisfy the above
Integrate Azure virtual network TAP (Terminal Access Point) to your network architecture.
Launch a single Azure ExpressRoute connection.
Launch a single network security group.
Integrate Azure Firewall to your network architecture.
Which of the following allows you to group virtual machines that are hosted in the same virtual network and define network security policies based on those groups without manual maintenance of explicit IP addresses?
Application Security Groups
Network Security Groups
Azure virtual network TAP (Terminal Access Point)
Azure Firewall
Note: This item is part of a series of questions with the exact same scenario but with a different proposed answer. Each one in the series has a unique solution that may, or may not, comply with the requirements specified in the scenario.
Your company stores its media assets in a storage account located in the Singapore region.
You need to recommend a solution to ensure that if the Singapore region fails, the data can still be accessed. The solution should also be cost-effective.
Solution: Configure your storage account to use Geo-zone-redundant storage (GZRS) option.
Does this meet the goal?
YES
NO
Choose which is true.
Azure Firewall uses Internet Protocol Security (IPsec) to encrypt all the network traffic between your Azure resources and on-premises network via the public Internet.
Azure network security groups can encrypt all the network traffic between your Azure resources and on-premises network via the public Internet.
You can set up a Point-to-Site VPN connection that uses Internet Protocol Security (IPsec) to connect to your Azure virtual network using your home computer via the public Internet.
You need to configure a network security group in your Azure subscription that restricts Remote Desktop Protocol access to your virtual machines.
Which two resources can be attached to your network security group?
Virtual Network
Subnet
Route Table
Network interface
DNS servers
Choose which is true. (2 Trues)
You can attach a network security group to a network interface.
You can attach a network security group to a subnet.
You can attach a network security group to a virtual network.
A company plans to migrate an application to Azure. The application will host the banking records of its users and you need to recommend a security information event management (SIEM) and security orchestration automated response (SOAR) solution.
What Azure service will fit your recommendation?
Azure CycleCloud
Azure Sphere
Microsoft Sentinel
Microsoft Defender for Cloud
Choose which is true. (2 Trues)
ARM templates are deployed using JSON files.
ARM templates does not allow you to declare variables.
ARM templates allows you to export the templates.
A company is planning to deploy its suite of enterprise applications to Microsoft Azure, where each application has several dependencies and subcomponents. The company must also control and manage the patching activities of the underlying operating system of the servers.
What type of cloud deployment solution should you recommend?
Infrastructure as a Service (laaS)
Platform as a Service (PaaS)
Software as a Service (SaaS)
Functions as a service (FaaS)
Note: This item is part of a series of questions with the exact same scenario but with a different proposed answer. Each one in the series has a unique solution that may, or may not, comply with the requirements specified in the scenario.
A company is migrating all its applications and data to Microsoft Azure. There is a strict requirement that the Azure environment must only be comprised of platform-as-a-service (PaaS) solutions to minimize the amount of administrative effort in managing the underlying resources.
Solution: Deploy the applications using the Azure App Service and migrate the data to Azure SQL databases.
Does this solution comply with the requirement?
YES
NO
Azure App Service and Azure Virtual Machines are services that you can use in Azure. For each service, you have to determine its correct type of cloud service model.
Select the correct answer from the drop-down list of options. Each correct selection is worth one point.
Azure Virtual Machines:
Infrastructure as a service (IaaS)
Platform as a service (PaaS)
Software as a service (SaaS)
Azure App Service and Azure Virtual Machines are services that you can use in Azure. For each service, you have to determine its correct type of cloud service model.
Select the correct answer from the drop-down list of options. Each correct selection is worth one point.
Azure App Service:
Infrastructure as a service (IaaS)
Platform as a service (PaaS)
ucture as a service (IaaS), Platform as a service (PaaS),
All hardware, software, and other supporting infrastructure is owned and managed by the cloud provider.
Public Cloud
Private Cloud
Hybrid Cloud
Computing resources used exclusively by one business or organization.
Public Cloud
Private Cloud
Hybrid Cloud
Cloud computing is the delivery of computing services __
over the Internet that needs an upfront cost on physical infrastructure.
over the Internet that offers faster innovation, flexible resources, pay-as-you-go pricing, and economies of scale.
over the Internet and the security of data and identities are entirely managed by the cloud provider.
over the Internet that allows you to manage the underlying infrastructure.
You have hundreds of servers hosted in your on-premises environment.
You plan to migrate some of the servers to an Azure pay-as-you-go-subscription.
Which expenditure model should you use?
Azure Reservations
Public cloud
Capital expenditure
Operating expenditure
TutorialsDojo is planning to migrate its application servers and database servers hosted on their on-premises datacenter hosted in Manila to Azure.
What is the primary benefit of using the public cloud for its servers?
Public cloud is a shared entity operated by a third-party cloud service provider that various corporations can use.
Public cloud is owned by the public and not a private organization or corporation.
Public cloud is used exclusively by a single business or organization.
Public cloud is a free shared entity that is crowdfunded by the public and is accessible by everyone.
What is the customer responsible for when using a software as a service (SaaS) solution?
Ensuring high availability of its applications.
Configuring and using the provided cloud-based application
Installing its custom applications
Ensuring the scalability of its cloud-based applications
Note: This item is part of a series of questions with the exact same scenario but with a different proposed answer. Each one in the series has a unique solution that may, or may not, comply with the requirements specified in the scenario.
A company is migrating all its applications and data to Microsoft Azure. There is a strict requirement that the Azure environment must only be comprised of platform-as-a-service (PaaS) solutions to minimize the amount of administrative effort in managing the underlying resources.
Solution: Deploy the applications using Azure Virtual Machines and Azure App Service.
Does this solution comply with the requirement?
YES
NO
Choose which is true. (2 Trues)
A platform as a service (PaaS) solution provides full control to the underlying operating systems of the Azure resources that run the host applications.
A platform as a service (PaaS) solution provides the capability to automatically scale the platform without any manual intervention.
A platform as a service (PaaS) solution provides a framework that developers can build upon to develop or customize cloud-based applications.
Choose which is true. (2 Trues)
You are charged for only what you use under the consumption-based model.
Reservations are considered as consumption-based pricing.
You pay for the resources you provision whether or not you use it under the fixed-price model.
Your company plans on migrating its application named TDojoApp1 to Azure.
TDojoApp1 has a high usage during the first and third weeks of the month and low usage during the 2nd and 4th weeks.
Which benefit of Azure Cloud Services supports cost management for this type of usage pattern?
Load balancing
Elasticity
High availability
Fault tolerance
Choose which is true. (2 Trues).
Two virtual machines that use D2d v4 instance will always be billed the same monthly costs.
Capital expenditures generate benefits over a long period. These expenditures are generally nonrecurring and result in the acquisition of permanent assets.
Operating expenditures are ongoing costs of doing business. Consuming cloud services in a pay-as-you-go model could qualify as an operating expenditure.
In the Azure Shared Responsibility Model, whose responsibility is it to patch the operating system of an Azure App Service?
Azure
Customer
Both Azure and the customer
Neither Azure nor the customer
An organization is planning to migrate all of its servers and data to Azure.
You need to recommend a solution to only use Software-as-a-Service Azure products that will support the planned migration.
Solution: Deploy Azure virtual machines and Azure SQL Database.
Does this meet the goal?
YES
NO
