Test MZ - simulator 1

Your company is planning to partner with a vendor for supply chain management. You want users from both organizations to be able to collaborate using a shared Teams channel. You need to configure B2B direct connect to meet this requirement. Which of the following statements regarding this configuration is correct?. Your organization should create a mutual trust relationship with the partner organization. Your organization will manage all the user accounts used for Teams collaboration. Users in the partner organization are required to sign up for access via an invitation you send. Login credentials created for partner users will be stored in your Microsoft Entra ID instance.

Your company suffers a catastrophic web outage due to a misconfigured driver on a database server. You need to find a cloud solution that allows the highly customized web application to run without requiring management of operating system settings or services. However, the company's web developers must be able to maintain customizations. What should you do to meet these requirements?. Migrate the web app to serverless compute. Move the web app to a software as a service (Saas) provider. Deploy the web app functionality using platform as a service (PaaS). Relocate the web app to an infrastructure as a service (laas) provider.

Which Azure feature enhances manageability and reliability by provisioning virtual machine instances based on workload? Correctly selected. Serverless compute. Availability zones. Autoscale. Site Recovery.

You are developing a microservice-based application for handling events generated by data mining You need to choose an Azure service to process these events with the following requirements: . It should be event-driven. . It should provide compute-on-demand. · It should not require server management. . It should also allow for writing event-handling code in C#. Which Azure service should you select?. Azure Virtual Machines. Azure App Service. Azure Functions. Azure Event Grid.

Which Azure management tool provides a graphic interface for deploying, managing, and monitoring Azure resources? Correctly selected. Azure portal. Azure Resource Manager. Azure PowerShell. Azure Command-line interface (CLI).

You work for a cloud solution provider. One of your company's clients considers moving its on-premises infrastructure to the cloud. However, the client wants a better understanding of the different models before it makes a decision. A third-party will not be involved. You need to describe the advantages of the different cloud models. For each of the following statements, select if the statement is true. Otherwise, was No. The public cloud allows you to deploy resources without managing the underlying hardware. The hybrid cloud allows you to deploy resources with no capital expenditure and minimal IT expertise. The private cloud allows you to deploy resources by having minimal IT expertise.

You need to give all users in a group the ability to create and manage all types of Azure resources in a subscription. Rights granted to the users should be kept to a minimum. Which built-in role-based access control (RBAC) role should you assign to the group? Correctly selected. Reader. Contributor. Owner. User Access Administrator.

To complete the statement in the answer area, select the appropriate option: Management groups let you organize multiple. subscriptions as a single management entity to facilitate easier management.

You are considering moving some of your applications to Azure as container instances. However, your manager wants you to explain to them about containers and their benefits first. You need to explain containers to your manager. Which four descriptions of containers are accurate? To answer, score the appropriate descriptions from the list of possible descriptions. A container requires you to configure the host virtual machine. A container can run on Windows or Linux. A container requires you to manually install dependencies. A container can be accessed over the Internet by IP address or domain name. A container can scale out as needed. A container represents a single app and its dependencies.

For each of the following statements regarding consumption and fixed cost price models, select Yes if the statement is true. Otherwise, select No. For organizations with consistent, high utilization, the consumption-based pricing model is the most efficient one. There are no upfront costs when using the consumption-based model. In the fixed price model, you pay for resources even if you do not use them.

To complete the sentence, select the appropriate option. ______________is a strategy to implement multiple layers of security to slow down an attack and provide early alert telemetry to act upon. Application insights. Azure AI Services. Customer Lockbox. Defense in depth.

For each of the following statements, select Yes if the statement correctly describes the use of Azure Policy initiatives. Otherwise, was No. An initiative is limited to being assigned to resource groups or subscriptions only. When an initiative assignment is evaluated, all of the policies in that initiative are evaluated. An initiative can only contain policies that exists within the same subscription.

You need to quickly deploy or clone application testing environments on an as-needed basis. Which two DevOps tools or practices could you use? Each correct answer presents a complete solution. Infrastructure as code. Azure Arc. Micro-segmentation. ARM templates. Virtual machine (VM) scale sets.

For each of the following statements about Azure Dedicated Hosts, select Yes if the statement is true. A provided physical server is dedicated to your organization's workload only. You can share a provided physical server across your multiple Azure subscriptions. You are charged per number of virtual machines (VMs) deployed.

You have been asked to develop cloud migration plans for your organization. As part of this assignment, you need to identify the most cost-effective cloud service type for each department in the organization. The solution should minimize management overhead. Given each department's requirements, which solution should you recommend? To answer, select the appropriate cloud service type from the drop-down menus. Use provider-managed hardware to run a customized database. Use a provider-managed calendar to schedule appointments and meetings. Use Azure services to integrate marketing data with business intelligence services.

You deploy three virtual machines (VMs) to Azure as a three-tiered architecture. One VM hosts a front-end web application, one VM hosts a business application programming interface (API), and the other VM hosts a Microsoft SQL Server database. Only the front-end web application should be publicly accessible, and it should be accessible over HTTP on port 80. All three VMs must be accessible over Remote Desktop Protocol (RDP) on port 222. Only your account should be able to use RDP to access the VMs. You need to determine how Network Security Groups (NSGs) can be used in this scenario. Which two ways can NSG rules be used? Each correct answer presents a complete solution. To ensure that only your account can use RDP to access the VMs. To ensure that only the front-end VM is publicly accessible over port 80. To ensure that the front-end VM hosts only web applications. To ensure that all three VMs are accessible over port 222.

To complete the statement in the answer area, select the appropriate option. Azure Monitor begins collecting data: As soon as you start the Azure Management Portal. As soon as you add a resource to a new Azure subscription. After enabling diagnostics. Only after creating the metrics and logs data stores.

Which two organization-level insights can you derive from the Regulatory Compliance dashboard of Microsoft Defender for Cloud? Each correct answer presents part of the solution. Overall secure score. Mitigation steps for reported threats. Number of passing and failing assessments. Security alerts ranked by severity. Overall compliance score.

Match each Azure solution to a scenario. To answer, drag the appropriate solution to each scenario. A solution may be used once, more than once, or not at all. Build a baseline behavioral profile of organizational entities to identify anomalous activity. Securely store a database connection string to avoid its accidental exposure in a web site's source code. Deny traffic to your Azure Virtual Network resources from known malicious IP addresses.

For each of the following statements regarding Azure Files, select Yes if the statement is true. Otherwise, was No. Azure Files can be accessed using the Server Message Block (SMB) protocol. Azure Files can be accessed using the Network File System (NFS) protocol. A shared access signature (SAS) is required to access Azure Files.

For each of the following statements regarding security benefits offered by Azure cloud, select Yes if the statement is true. Otherwise, was No. Microsoft Entra ID is used to manage API cryptographic keys. Azure Storage encryption is enabled by default and cannot be disabled. Azure ExpressRoute is used to secure traffic between virtual networks.

Which statements accurately describe Azure PowerShell? For each of the following statements, select Yes if the statement is true. Otherwise, was No. Azure PowerShell can be used to create scripts to automate Azure management tasks. Azure PowerShell virtual machine (VM) management is limited to Windows VMs only. Azure PowerShell can be run in a browser in the Azure Cloud Shell. Azure Resource Manager templates use Azure PowerShell syntax.

Which feature of Azure Monitor allows you to visually analyze telemetry data?. Alerts. Application Insights. Metrics. Service Health.

What is the advantage of moving your company's infrastructure to Azure by using a public cloud deployment model? Correctly selected. Legacy applications are easier to support. The company has complete control of the resources that are used by the operating system. The company is able to scale up as needed with no capital expenditure (CapEx) required. There are no operational expenditure (OpEx) costs.

You need to compare the costs of running an application workload in Azure versus on-premises. What should you do to ensure that you can use the Azure TCO calculator to complete this task? @ Correctly selected. Define the server, database, storage, and networking workload. Initiate a paid Azure cloud subscription for your organization. Create an authorized service account in Microsoft Entra ID. Determine the app's compute, storage, and network requirements.

What is the maximum length of time you can use an Azure free subscription's credits before they expire? Correctly selected. 30 days. 12 months. 24 months. 6 months.

For each of the described scenarios, select the most appropriate Azure governance methodology. To answer, select the most appropriate methodology from the drop-down menus. You need to prevent any users from deleting resources from a subscription with contents spanning multiple resource groups. You need to use information from Microsoft Defender for Cloud to develop best practices recommendations for optimization. You need to define a set of policies to help ensure compliance for resources contained in a resource group.

Match each Microsoft cloud service with its cloud service type. To answer, drag the appropriate type to each cloud service. A type may be used once, more than once, or not at all. Azure Cosmos DB. Azure Storage. Microsoft Office 365.

Which Azure security solution provides general security recommendations and suggests remediations to better secure your resources? Correctly selected. Azure Information Protection (AIP). Azure DDoS Protection. Key Vault. Microsoft Defender for Cloud.

Your company is considering using Linux-based Azure Container Instances (ACIs) to deploy a simple application. The application runs as a stateful application. You need to provide storage to retrieve and persist state. What type of storage should you use?. Azure Files. Azure Blob. Azure Disk. Azure Archive.

For each of the following statements regarding serverless computing using Azure services, select Yes if the statement is true. Otherwise, select No. Azure Functions are controlled using an input trigger and an output trigger. Azure App Service can be used to run apps in Linux or Windows containers. Azure Logic Apps requires application coding.

You manage a development team that needs to focus all its efforts on creating and maintaining application code. Your team does not have the resources to provision and scale the infrastructure your applications require to run. What should you do?. Automate virtual machine provisioning with Azure Quickstart Templates. Containerize the apps and deploy a container cluster service. Create an Azure Functions subscription and upload your code. Configure virtual machines and deploy application updates using Azure command-line interface (CLI).

Your company is planning an Azure cloud deployment that must meet the following requirements: · Improve the continuity of business-critical applications · Improve application performance · Detect threats and vulnerabilities · Reduce overall Azure costs You need to use a tool that will help you make these types of recommendations. Which tool should you use? To answer, click the appropriate option in the answer area. Advisor. Home. Dashboard. All services. All resources. Resource groups. App Services. Function App. Azure Cosmos DB. Virtual machines.

To complete the sentence, select the appropriate option from the drop-down menu. With____________users can access all needed applications without Single Sign-On (SSO) being required to uthenticate a second time. Conditional Access. Multi-Factor Authentication (MFA). Role-Based Access Control (RBAC). Single Sign-On (SSO).

A company is reviewing security for virtual machines (VMs) deployed on its hybrid cloud. You need to identify security features provided through Microsoft Defender for Cloud. For each of the following statements, select Yes if the statement is true. Otherwise, was No. Microsoft Defender for Cloud supports monitoring, security recommendations, and advanced threat protection for cloud and on-premises virtual machine (VM) resources. Microsoft Defender for Cloud provides native integration with Microsoft Defender Antivirus in Windows. Microsoft Defender for Cloud support is limited to Windows operating systems only. Microsoft Defender for Cloud can automatically discover and assess security for new Azure resources as they are deployed.

A company is looking for solutions to help to lower cloud-related costs. You need to identify tools and mechanisms that help save money. To answer, select the appropriate cost control mechanism from the list. Your company plans to commit to a three- year plan for virtual machines (VMs) and storage resources to receive a reduction in pay-as-you-go prices. Your company plans to make use of a free SaaS solution that lets your company monitor, allocate, and optimize cloud spend in a multi-cloud environment. Your company wants to increase default limits on how many select resources of each type can be provisioned per Azure Region.

Which Azure resource can be deployed as Infrastructure-as-a-Service (laaS)?. API Management. Office 365. Azure SQL Database. Virtual machine (VM).

A company has a Microsoft Entra ID P1 subscription. The company has a hybrid environment that uses both Microsoft Entra ID and on-premises federated AD using Active Directory Federation Services (AD FS). The company is upgrading its security and must configure Microsoft Entra self-service password reset (SSPR) and Multi-Factor Authentication (MFA). You need to identify the authentication types that are supported by both SSPR and MFA. Which three authentication types are supported by both SSPR and MFA? Each correct answer presents a complete solution. Voice call. SMS. Security questions. Microsoft Authenticator app. Email address.

Which Azure resource can be managed as Software-as-a-Service (Saas)? Correctly selected. Azure SQL Database. Exchange Online. Virtual machine (VM). API Management.

Your company uses Azure Blueprints to assist with its migration to Azure. User1 should be able to assign published blueprints. You need to add User1 to the role-based access control (RBAC) role necessary to provide this permission. Your solution should follow the principle of least privilege. Which role should you assign User1 to?. Owner. Blueprint Operator. Contributor. Blueprint Contributor.