WorksheetsRevision Part 3 - Azure Management and Governance
Total questions: 40
Worksheet time: 35mins
___________________________________ can calculate cost savings due to reduced electricity consumption as a result of migrating on-premise Microsoft SQL servers to Azure.
The Azure Migrate: Server Assessment tool
The Azure Total Cost of Ownership (TCO) calculator
The Database Migration Assistant
Microsoft Trust CenterThe pricing calculator in Azure
Your company's Active Directory forest includes thousands of user accounts. You have been informed that all network resources will be migrated to Azure. Thereafter, the on-premises data center will be retired. You are required to employ a strategy that reduces the effect on users, once the planned migration has been completed.
Solution: You plan to sync all the Active Directory user accounts to Azure Active Directory (Azure AD).
Does the solution meet the goal?
Yes
No
Your company's infrastructure includes a number of business units that each need a large number of various Azure resources for everyday operation. The resources required by each business unit are identical. You are required to sanction a strategy to create Azure resources automatically.
Solution: You recommend that management groups be included in the strategy.
Does the solution meet the goal?
Yes
No
You have been informed by your superiors of the company's intentions to automate server deployment to Azure. There is, however, some concern that administrative credentials could be uncovered during this process. You are required to make sure that during the deployment, the administrative credentials are encrypted using a suitable Azure solution.
Solution: You recommend the use of Azure Multi-Factor Authentication (MFA).
Does the solution meet the goal?
Yes
No
The company would like to develop a cloud solution by making use of Azure Government. Azure Government can only be used by certain types of clients to develop cloud solutions. Which of the following are the types of customers that can make use of Azure Government in this situation?
A. A government contractor from any country
B. A government entity from any country
C. A European government contractor
D. A European government entity
E. A United States government contractor
F. A United States government entity
(a)
Your company has an Azure Active Directory (Azure AD) environment. Users occasionally connect to Azure AD via the Internet. You have been tasked with making sure that users who connect to Azure AD via the internet from an unidentified IP address, are automatically encouraged to change passwords.
Solution: You configure the use of Azure AD Identity Protection.
Does the solution meet the goal?
Yes
No
What is the first stage in the Microsoft Cloud Adoption Framework for Azure?
Adopt the cloud.
Make a plan.
Ready your organization.
Define your strategy.
Yes or No
1. An Azure subscription can be associated to multiple Azure Active Directory (Azure AD) tenants.
2. You can change the Azure Active Directory (Azure AD) tenant to which an Azure subscription is associated
3. When an Azure subscription expires, the associated Azure Active Directory (Azure AD) tenant is deleted automatically
1. Yes
2. No
3. Yes
1. No
2. Yes
3. No
1. No
2. Yes
3. Yes
1. Yes
2. Yes
3. No
1. No
2. No
3. No
"Resource groups" provide organizations with the ability to manage the compliance of Azure resources across multiple subscriptions.
Instructions: Review the text in "quotes". If it makes the statement correct, select `No change is needed`. If the statement is incorrect, select the answer choice that makes the statement correct.
No change is needed
Management groups
Azure policies
Azure App Service plans
Your company plans to migrate to Azure. The company has several departments. All the Azure resources used by each department will be managed by a department administrator. What are two possible techniques to segment Azure for the departments?
Each correct answer presents a complete solution.
multiple subscriptions
multiple Azure Active Directory (Azure AD) directories
multiple regions
multiple resource groups
Yes or No
1. A single Microsoft account can be used to manage multiple Azure subscriptions
2. Two Azure subscriptions can be merged into a single subscription
3. A company can use resources from multiple subscriptions
1. No
2. Yes
3. Yes
1. No
2. Yes
3. No
1. No
2. No
3. Yes
1. Yes
2. No
3. Yes
1. Yes
2. Yes
3. No
You have several virtual machines in an Azure subscription.
You create a new subscription.
The virtual machines cannot be moved to the new subscription
The virtual machines can be moved to the new subscriptions
The virtual machines can be moved to the new subscriptions only if they are all in the same resource group
The virtual machines can be moved to the new subscriptions only if they run Windows Server 2016
Yes or No
1. Each Azure subscription can contain multiple account administrators
2. Each Azure subscription can be managed by using a Microsoft account only
3. An Azure resource group contains multiple Azure subscriptions
1. Yes
2. Yes
3. No
1. Yes
2. No
3. Yes
1. Yes
2. No
3. No
1. No
2. No
3. Yes
1. No
2. Yes
3. No
You need to be notified when Microsoft plans to perform maintenance that can affect the resources deployed to an Azure subscription. What should you use?
Azure Monitor
Azure Service Health
Azure Advisor
Microsoft Trust Center
Yes or No
1. An Azure subscription can have multiple account administrators
2. An Azure subscription can be managed by using a Microsoft account only
3. An Azure resource group can contain multiple Azure subscriptions
1. No
2. Yes
3. No
1. Yes
2. No
3. No
1. No
2. Yes
3. Yes
1. No
2. No
3. Yes
1. Yes
2. No
3. Yes
Yes or No
1. To use Azure Active Directory (Azure AD) credentials to sign in to a computer that runs Windows 10, the computer must be joined to Azure AD
2. Users in Azure Active Directory (Azure AD) are organized by using resource groups
3. Azure Active Directory (Azure AD) groups support dynamic membership rules
1. Yes
2. No
3. Yes
1. No
2. No
3. Yes
1. Yes
2. Yes
3. No
1. No
2. Yes
3. Yes
1. No
2. Yes
3. No
A support engineer plans to perform several Azure management tasks by using the Azure CLI. You install the CLI on a computer. You need to tell the support engineer which tools to use to run the CLI. Which two tools should you instruct the support engineer to use?
A. Command Prompt
B. Azure Resource Explorer
C. Windows PowerShell
D. Windows Defender Firewall
E. Network and Sharing Center
(a)
You have an Azure environment. You need to create a new Azure virtual machine from a tablet that runs the Android operating system.
Solution: You use PowerShell in Azure Cloud Shell.
Does this meet the goal?
Yes
No
Yes or No
1. Azure Monitor can monitor the performance of on-premises computers
2. Azure Monitor can send alerts to Azure Active Directory security groups
3. Azure Monitor can trigger alerts based on data in an Azure Log Analytics workspace
1. No
2. Yes
3. No
1. No
2. Yes
3. Yes
1. Yes
2. Yes
3. No
1. Yes
2. Yes
3. Yes
1. Yes
2. No
3. Yes
You need to manage Azure by using Azure Cloud Shell. Which Azure portal icon should you select?
+
<_
Settings
>_
An Azure administrator plans to run a PowerShell script that creates Azure resources. You need to recommend which computer configuration to use to run the script.
Solution: Run the script from a computer that runs Linux and has the Azure CLI tools installed. Does this meet the goal?
Yes
No
Yes or No
1. From Azure Service Health, an administrator can view the health of all the services in an Azure environment
2. From Azure Service Health, an administrator can create a rule to be alerted if an Azure service fails
3. From Azure Service Health, an administrator can prevent a service failure
1. Yes
2. Yes
3. No
1. No
2. No
3. Yes
1. No
2. Yes
3. No
1. No
2. Yes
3. Yes
1. Yes
2. No
3. Yes
An Azure administrator plans to run a PowerShell script that creates Azure resources. You need to recommend which computer configuration to use to run the script.
Solution: Run the script from a computer that runs macOS and has PowerShell Core 6.0 installed. Does this meet the goal?
Yes
No
You need to view a list of planned maintenance events that can affect the availability of an Azure subscription. Which blade should you use from the Azure portal?
A. Dashboard
B. All resources
C. App Services
D. Function Apps
E. SQL databases
F. Azure Cosmos DB
G. Virtual machines
H. Load balancers
I. Help + Support
(a)
You need to identify which blades in the Azure portal must be used to perform the following tasks:
✑ View security recommendations.
✑ Monitor the health of Azure services.
✑ Browse available virtual machine images.
Which blade should you identify for each task?
1. Monitor the health of Azure services
2. Browse available virtual machines images
3. View security recommendations
A. Monitor
B. Subscriptions
C. Marketplace
D. Advisor
1. A
2. D
3. C
1. A
2. C
3. D
1. A
2. B
3. C
1. B
2. C
3. D
1. C
2. B
3. D
You have an Azure web app. You need to manage the settings of the web app from an iPhone. What are two Azure management tools that you can use?
Azure CLI
the Azure portal
Azure Cloud Shell
Windows PowerShell
Azure Storage Explorer
Yes or No
1. Azure Advisor can generate a list of Azure virtual machines that are protected by Azure Backup
2. If you implement the security recommendations provided by Azure Advisor, your company's secure score will decrease
3. To maintain Microsoft support, you must implement the security recommendations provided by Azure Advisor within a period of 30 days
1. No
2. Yes
3. Yes
1. No
2. No
3. Yes
1. No
2. Yes
3. Yes
1. No
2. No
3. No
1. Yes
2. No
3. No
What can you use to automatically send an alert if an administrator stops an Azure virtual machine?
Azure Advisor
Azure Service Health
Azure Monitor
Azure Network Watcher
You have an Azure environment. You need to create a new Azure virtual machine from a tablet that runs the Android operating system. What are three possible solutions?
Use Bash in Azure Cloud Shell.
Use PowerShell in Azure Cloud Shell.
Use the PowerApps portal.
Use the Security & Compliance admin center.
Use the Azure portal.
You have an Azure subscription named Subscription1. You sign in to the Azure portal and create a resource group named RG1.From Azure documentation, you have the following command that creates a virtual machine named VM1. az vm create --resource-group RG1 --name VM1 --image UbuntuLTS --generate-ssh-keysYou need to create VM1 in Subscription1 by using the command.
Solution: From the Azure portal, launch Azure Cloud Shell and select Bash. Run the command in Cloud Shell.
Does this meet the goal?
Yes
No
Your company uses management groups to manage resources in your Azure tenant more efficiently. User 1 should be able to assign access and assign policies to management groups. You need to determine which role-based access control (RBAC) role User 1 should be added to. Your solution should follow the principle of least privilege. Which role should you add User 1 to?
Management Group Contributor
User Access Administrator
Contributor
Owner
You want to control the users who are allowed to create virtual networks (VNets). What type of resource or feature should you use for this scenario?
RBAC
Advisor
Policy
Lock
Initiative
Azure PowerShell virtual machine (VM) management is limited to Windows VMs only.
True
False
Azure Resource Manager templates use Azure PowerShell syntax.
True
False
Which statement best describe what a resource lock does to a virtual machine (VM)?
It allows the VM to be detected, but not modified
It forces the VM to be deleted within a specific time period
It prevents the VM from being deleted
It forces the VM to be deleted immediately
Your company plans to deploy the Azure cloud three virtual machines (VMs) and a Load Balancer. You want to estimate the cost of using all four resources before you create a subscription. You need to choose the most appropriate cost estimation tool. Which tool should you use?
Azure Pricing Calculator
Azure Advisor
Cost Management
Total Cost of Ownership (TCO) calculator
You want to enable developers to improve app performance and usability. Which monitoring feature should you use for this scenario?
Alerts
Application Insight
Resource Health
Metrics
Which Azure service can use autoscale to add or remove resources as appropriate to minimize costs and ensure optimum performance levels?
Microsoft Defender for Cloud
Azure Service Health
Azure Monitor
Azure Advisor
You are going to start collecting data about your Azure infrastructure with Azure Monitor. Which type of data collection requires you to enable diagnostics?
Event logs
Linux virtual machine (VM) health
Container workload performance
Usage of Web application
A coworker informs you of a planned Azure maintenance window. You attempt to verify this information using the tool shown in the Exhibit. You are still uncertain whether the maintenance will impact services you use. What should you do to determine how this maintenance might impact your organization?
Select the resource types for your account in Resource Health
Use Azure monitor to view maintenance intervals for your resources
Verify any planned maintenance vis Service Health dashboard.
Check the Azure status page for any planned maintenance outages
