Font size
S
M
L
XL
WorksheetsWeek_2
Total questions: 68
Worksheet time: 1hrs 8mins
Name
Class
Date
1.
What does AKS stand for in Azure?
a)
Azure Kube System
b)
Azure Kubernetes Service
c)
Advanced Kubernetes Setup
d)
Automated K8s Service
2.
What is the default orchestrator for AKS?
a)
Docker Swarm
b)
Apache Mesos
c)
Nomad
d)
Kubernetes
3.
In AKS, what is a node pool?
a)
Group of namespaces
b)
Group of storage accounts
c)
Group of VMs in the cluster
d)
Set of load balancers
4.
Which AKS component exposes services to the internet?
a)
Internal IP
b)
Load Balancer
c)
kubelet
d)
kubectl
5.
How can you deploy an application to AKS?
a)
az aks push
b)
Uploading to ACR
c)
kubectl apply -f deployment.yaml
d)
ARM templates only
6.
Which tool is used to manage AKS cluster workloads?
a)
Docker CLI
b)
Azure CLI
c)
kubectl
d)
Terraform
7.
What does the 'kubectl get pods' command do?
a)
Deletes running pods
b)
Lists current pods
c)
Scales a deployment
d)
Exposes a service
8.
What is the primary purpose of Azure Log Analytics?
a)
Store application secrets
b)
Analyze and query log data
c)
Manage identities
d)
Configure alerts
9.
Azure Application Insights is mainly used for:
a)
Visualizing billing data
b)
Monitoring infrastructure as code
c)
Performance monitoring of applications
d)
Assigning user roles
10.
What does observability help achieve in a cloud-native environment?
a)
Deploy applications
b)
Manage access
c)
Understand system state through telemetry
d)
Reduce costs
11.
Why is observability important in modern practices?
a)
For performance reviews
b)
For log shipping
c)
To identify and troubleshoot issues quickly
d)
To generate deployment templates
12.
Which of the following is not the pillars of observability?
a)
Logs
b)
Metrics
c)
Traces
d)
Monitoring
13.
Which pillar of observability would you use to understand a user’s journey through your application?
a)
Metrics
b)
Logs
c)
Traces
d)
Alerts
14.
Which Azure Storage type is optimized for storing unstructured data like documents or media files?
a)
File Storage
b)
Blob Storage
c)
Queue Storage
d)
Table Storage
15.
Which Azure Storage service is ideal for storing and retrieving messages between distributed application components?
a)
Blob Storage
b)
Queue Storage
c)
File Storage
d)
Table Storage
16.
What is the primary function of Entra ID in Azure?
a)
Resource monitoring
b)
Identity and access management
c)
Billing
d)
Resource provisioning
17.
Which role allows full access to manage all resources in Azure?
a)
Reader
b)
Contributor
c)
Owner
d)
User Access Administrator
18.
What does Microsoft Defender for Cloud primarily help with?
a)
Cost management
b)
Security posture management
c)
CI/CD automation
d)
Resource tagging
19.
Which of the following can NOT be stored in Azure Key Vault?
a)
API keys
b)
Passwords
c)
Blob
d)
SSL certificates
20.
What is the main use of Azure App Configuration?
a)
Encrypt sensitive values
b)
Manage application settings centrally
c)
Monitor resource performance
d)
Deploy infrastructure
21.
Which type of Azure Storage is optimized for storing unstructured data like images and videos?
a)
File Storage
b)
Blob Storage
c)
Queue Storage
d)
Table Storage
22.
What is Azure File Storage used for?
a)
Storing large video files
b)
Managing message queues
c)
Providing shared file systems via SMB
d)
NoSQL database storage
23.
Which Azure storage service is ideal for storing structured NoSQL data?
a)
Queue Storage
b)
Blob Storage
c)
Table Storage
d)
File Storage
24.
What is Azure Queue Storage primarily used for?
a)
Sending notification emails
b)
Storing large documents
c)
Storing messages between cloud components
d)
Database backups
25.
What tool can be used to manage Azure Storage from a graphical interface?
a)
Azure CLI
b)
Azure Storage Explorer
c)
PowerShell
d)
Azure REST API
26.
Which of the following is a valid redundancy option in Azure Storage?
a)
Locally Redundant Storage
b)
Geo-Redundant Network
c)
Basic Redundancy Plan
d)
Managed Backup Option
27.
Which service would you use to store logs and diagnostics data for analysis?
a)
Azure Blob Storage
b)
Azure Queue Storage
c)
Azure File Storage
d)
Azure Table Storage
28.
Which tool can automate uploading files to Azure Storage using scripts?
a)
Azure Storage Explorer
b)
Azure CLI
c)
Azure Monitor
d)
Azure Portal only
29.
What is a Virtual Network (VNet) in Azure?
a)
A physical network
b)
A secure, isolated network
c)
An external VPN connection
d)
A cloud-based routing protocol
30.
Which component is used to divide a VNet into smaller segments?
a)
Resource Groups
b)
Availability Zones
c)
Subnets
d)
VNets
31.
What is the primary function of a Network Security Group (NSG)?
a)
Manage subscriptions
b)
Route traffic between VNets
c)
Control traffic to resources
d)
Store logs
32.
Which of the following can be associated with a Network Security Group?
a)
VMs and Subnets
b)
Azure SQL Databases only
c)
App Services only
d)
Resource Groups
33.
What is the purpose of an Azure Load Balancer?
a)
Secure traffic between subnets
b)
Distribute traffic across resources
c)
Encrypt storage data
d)
Deploy VM images
34.
What feature does Application Gateway provide for security?
a)
Firewall Manager
b)
Web Application Firewall (WAF)
c)
Key Vault Integration
d)
Azure Security Center
35.
What is required for internet access from a subnet in a VNet?
a)
NSG only
b)
Private Endpoint
c)
Public IP/NAT
d)
VPN Gateway
36.
Scenario: Your team needs to deploy a containerized app with auto-scaling. Which Azure service should you use?
a)
Azure App Service
b)
Azure Kubernetes Service (AKS)
c)
Azure Functions
d)
Azure VMs
37.
Scenario: To restrict SSH access to your AKS nodes, which Azure networking feature should you configure?
a)
Network Security Groups (NSGs)
b)
Azure Load Balancer
c)
Azure DNS
d)
VNet Peering
38.
Scenario: You need to monitor latency spikes in your AKS app. Which pillar of observability should you analyze?
a)
Logs
b)
Metrics
c)
Traces
d)
Alerts
39.
Scenario: To securely store TLS certificates for your AKS ingress, which service should you use?
a)
Azure Storage
b)
Azure Key Vault
c)
Azure Monitor
d)
Entra ID
40.
Scenario: Your team wants single sign-on (SSO) for the AKS dashboard. Which Azure service enables this?
a)
Entra ID (formerly AAD)
b)
Azure RBAC
c)
Microsoft Defender
d)
Azure Policy
41.
Scenario: You need to analyze logs from AKS, VMs, and Storage Accounts in one place. Which Azure service should you use?
a)
Azure Metrics
b)
Azure Log Analytics
c)
Application Insights
d)
Defender for Cloud
42.
Scenario: Your AKS cluster needs to pull container images securely. Which Azure feature should you enable?
a)
Azure Container Registry (ACR)
b)
Blob Storage
c)
Azure Pipelines
d)
Azure Artifacts
43.
Scenario: You need to ensure only developers can deploy to the AKS . Which Azure feature enforces this?
a)
Role-Based Access Control (RBAC)
b)
NSGs
c)
Azure Policy
d)
Key Vault
44.
Scenario: Your AKS app has intermittent failures. Which observability tool helps trace requests across microservices?
a)
Log Analytics
b)
Metrics
c)
Application Insights
d)
Azure Monitor
45.
Scenario: To protect AKS from zero-day vulnerabilities, which Azure service provides threat detection?
a)
Azure Firewall
b)
Microsoft Defender for Cloud
c)
Key Vault
d)
Azure Sentinel
46.
Scenario: Your AKS cluster needs to access a Azure SQL Database. Which authentication method is most secure?
a)
SQL Login
b)
Managed Identity
c)
Service Principal
d)
Storage Key
47.
Scenario: Your AKS nodes run out of disk space. Which Azure Monitor feature alerts you proactively?
a)
Metric Alerts
b)
Log Search
c)
Workbooks
d)
Dashboards
48.
Scenario: You need to store unstructured data (e.g., images) in Azure. Which storage service is best?
a)
Blob Storage
b)
Azure Files
c)
Table Storage
d)
Queue Storage
49.
Scenario: You need to isolate dev/test/prod environments in Azure. Which networking feature should you use?
a)
Subnets within a VNet
b)
Separate Resource Groups
c)
Azure Firewall
d)
DNS Zones
50.
Scenario: To securely store connection strings for your app, which service should you use?
a)
Azure Storage
b)
Azure Key Vault
c)
Azure Monitor
d)
Entra ID
51.
Scenario: You need to grant a developer read-only access to Blob Storage. Which RBAC role should you assign?
a)
Owner
b)
Storage Blob Data Reader
c)
Contributor
d)
Key Vault Administrator
52.
Scenario: Your VNet needs to connect to an on-premises datacenter. Which service provides a secure tunnel over the internet?
a)
ExpressRoute
b)
VPN Gateway
c)
VNet Peering
d)
Azure Bastion
53.
Scenario: To analyze logs from multiple Azure resources, which service should you use?
a)
Azure Metrics
b)
Log Analytics Workspace
c)
Application Insights
d)
Event Hubs
54.
Scenario: You need to restrict access to a Storage Account to specific IPs. Which feature should you enable?
a)
Storage Firewall
b)
NSGs
c)
Private Link
d)
Azure AD Authentication
55.
Scenario: Your web app has intermittent 500 errors. Which Azure Monitor feature helps diagnose the issue?
a)
Metrics
b)
Application Insights Failures Blade
c)
Activity Logs
d)
Network Watcher
56.
Scenario: To ensure only HR can access payroll files in Blob Storage, which security feature is most effective?
a)
SAS Tokens
b)
Entra ID + RBAC
c)
Storage Encryption
d)
Firewall Rules
57.
Scenario: You need to set up alerts for unusual activity in Key Vault. Which Azure service provides this?
a)
Microsoft Defender for Cloud
b)
Azure Policy
c)
Log Analytics
d)
Network Security Groups
58.
Scenario: To monitor latency between AKS pods and Azure SQL, which Application Insights feature should you use?
a)
Application Map
b)
Log Search
c)
Availability Tests
d)
Workbooks
59.
Scenario: You need to archive audit logs for compliance. Which Storage tier is most cost-effective?
a)
Hot
b)
Cool
c)
Archive
d)
Premium
60.
Scenario: Your app secrets in Key Vault must rotate monthly. Which feature automates this?
a)
Key Vault Auto-Rotation
b)
Azure Automation
c)
Logic Apps
d)
Event Grid
61.
Scenario: To track user sign-ins to your Azure resources, which log should you query?
a)
Entra ID Sign-In Logs
b)
Activity Logs
c)
NSG Flow Logs
d)
Diagnostic Logs
62.
Scenario: You’re designing a VNet with 3 subnets (web, app, DB). Which CIDR block provides ~250 IPs per subnet?
a)
10.0.0.0/16
b)
10.0.0.0/24
c)
192.168.0.0/30
d)
172.16.0.0/12
63.
Scenario: Why might you assign the Key Vault Administrator role instead of just Key Vault Secrets User?
a)
To read secrets
b)
To fully manage
c)
To delete the Key Vault
d)
To encrypt VM disks
64.
Scenario: Your team needs to manage Entra ID user licenses but not security roles. Which built-in role is appropriate?
a)
User Administrator
b)
Global Administrator
c)
Security Administrator
d)
Application Administrator
65.
Scenario: Which RBAC role allows creating resources but not assigning permissions?
a)
Owner
b)
Contributor
c)
Reader
d)
Key Vault Administrator
66.
Scenario: Why would you use a Custom RBAC Role instead of a built-in role?
a)
To reduce costs
b)
To define granular permissions
c)
To automate deployments
d)
To enable MFA
67.
Scenario: A contractor needs temporary access to Key Vault secrets. Which is the most secure method?
a)
Shared account
b)
Time-bound SAS tokens
c)
Permanent RBAC role
d)
Storage firewall exception
68.
Scenario: An app needs to access Key Vault during deployment. Which Entra ID identity type should you use?
a)
User account
b)
Managed Identity
c)
Service Principal with password
d)
Guest user
Reset
