Azure Learning Series

Quiz Time

1. Which among the following is the correct Azure CLI cmdlet to create a Network Security
Group (NSG)?
a. az sec nsg update
b. az nsg create
c. az network nsg create
d. az security nsg create
2. You are assigning Azure AD roles. Which role will allow the user to manage all the groups in
your Team’s tenants and be able to assign other administrator roles? Select one.
a. Global Administrator
b. Password Administrator
c. Security Administrator
d. User Administrator
3. You would like to categorize resources and billing for different departments like IT and HR.
The billing needs to be consolidated across multiple resource groups and you need to ensure
everyone complies with the solution. What should you do? {Choose two to complete a
solution}.
a. Create tags for each department
b. Create a billing group for each department
c. Create an Azure policy
d. Add the groups into a single resource group
e. Create a subscription account rule
4. Which of the following best describes the format of an Azure Resource Manager template?
Select one.
a. A markdown document with a pointer table
b. A JSON document with key-value pairs
c. A TXT document with key-value pairs
d. An XML document with element-value pairs
5. Your company has an existing Azure tenant named alpineskihouse.onmicrosoft.com. The
company wants to start using alpineskihouse.com for its Azure resources. You add a custom
domain to Azure. Now, you need to add a DNS record to prepare for verifying the custom
domain. Which two of the following record types could you create?
a. Add a PTR record to the DNS zone
b. Add a TXT record to the DNS zone
c. Add an MX record to the DNS zone
d. Add d an SRV record to the DNS zone
e. Add a CNAME record to the DNS zone
6. Your company is preparing to implement a Site-to-Site VPN to Microsoft Azure. You are
selected to plan and implement the VPN. Currently, you have an Azure subscription, an
Azure virtual network, and an Azure gateway subnet. You need to prepare the on-premises
environment and Microsoft Azure to meet the prerequisites of the Site-to-Site VPN. Later,
you will create a VPN connection and test it. What should you do? (Each answer presents part
of the solution. Select three.
a. Obtain a VPN device for the on-premises environment.
b. Obtain a VPN device for the Azure environment.
c. Create a virtual network gateway (VPN) and the local network gateway in Azure
d. Create a virtual network gateway (ExpressRoute) in Azure
e. Obtain a public IPv4 IP address without NAT for the VPN device
f. Obtain a public IPv4 IP address behind NAT for the VPN device
7. Which load balancing strategy does the Application Gateway implement? Select one.
a. Distributes requests to each available server in a backend pool, in turn, round-robin.
b. Distributes requests to the server in the backend pool with the lightest load.
c. Polls each server in the backend pool in turn and sends the request to the first server that
responds.
Azure Learning Series

d. Uses one server in the backend pool until that server reaches 50% load, then moves to the
next server.
8. Your company is building an app in Azure. The app has the following storage requirements:
->Storage must be reachable programmatically through a REST API.
->Storage must be globally redundant.
->Storage must be accessible privately within the company’s Azure environment.
-> Storage must be optimal for unstructured data.
Which type of Azure storage should you use for the app? Select one.
a. Azure Data Lake store
b. Azure Table Storage
c. Azure Blob Storage
d. Azure File Storage
9. You are researching Microsoft Azure for your company. The company is considering
deploying Windows-based VMs in Azure. However, before moving forward, the management
team has asked you to research the costs associated with Azure VMs. You need to document
the configuration options that are likely to save the company money on their Azure VMs.
Which options should you document? (Each answer presents part of the solution. Select four.
a. Use HDD instead of SSD for VM storage
b. Use unmanaged premium storage instead of managed standard storage
c. Bring your own Windows custom images.
d. Use different Azure regions
e. Use the least powerful VMs that meet your requirements
f. Place all VMs in the same resource group
g. Bring your own Windows license for each VM
10. The objectives for Lab Scenario:
In this lab, you will:
-> Task 1: Provision of the lab environment
-> Task 2: Create and configure an Azure Log Analytics workspace and Azure Automation-
based solutions.
-> Task 3: Review default monitoring settings of Azure virtual machines.
-> Task 4: Configure Azure virtual machine diagnostic settings.
-> Task 5: Review Azure Monitor functionality.
-> Task 6: Review Azure Log Analytics functionality.

Answers
1. c.
Explanation: We can control network traffic to resources in a virtual network using a network security
group. ‘az network nsg’ create is used to create a network security group.
2. a.
Explanation: Global administrator. Only the global administrator can manage groups across tenants
and assign other administrator roles.
3. a & c.
Explanation: Create tags for each department and create Azure policy. You should create a tag with a
key: value pair like department: HR. You can then create an Azure policy that requires the tag to be
applied before a resource is created.
4. b.
Explanation: A JSON document with key-value pairs. An Azure Resource Template is a JSON
document with key-value pairs.
5. b & c.
Explanation: By default, Azure will prompt you to create a custom TXT record in your DNS zone to
verify a custom domain. Optionally, you can use an MX record instead. The result is the same. Other
record types are not supported
Azure Learning Series

6. a, c & e:
Explanation: The prerequisites for a Site-to-Site VPN are having a compatible VPN device on-
premises, having a public IPv4 IP without NAT on the on-premises VPN device, and creating a VPN
gateway and local network gateway in Azure. IPv6 is not supported for VPNs. ExpressRoute is a
different setup and not part of a Site-to-Site VPN.
7. a.
Explanation: The Application Gateway distributes requests to each available server in the backend
pool using the round-robin method.
8. c.
Explanation: Azure Blob Storage is optimal for unstructured data and meets the requirements for the
company’s app. Azure Data Lake supports some of the requirements, such as unstructured data and
REST API access. However, Azure Data Lake is geared for analytics workloads and is only available
as locally redundant (multiple copies of data in a single Azure region).
9. a,d,e & g:
Explanation: In this scenario, you need to document which of the options presented are likely to save
the company money for their Azure VMs. While this isn’t an exhaustive list, the correct money-
saving configuration options are: Use HDD instead of SSD, use different Azure regions, use the least
powerful VMs that meet your requirements, and bring your own Windows license (instead of paying
for a license with the VM). The other options usually increase costs.
10. This is a lab scenario and you need to evaluate Azure functionality that would provide insight into
the performance and configuration of Azure resources, focusing on Azure virtual machines. To
accomplish this, you intend to examine the capabilities of Azure Monitor, including Log Analytics.
Consult with your instructor on how to access the lab instructions and lab environment (if provided).