Answer Summary

Below is a summary of your answers.

Back to Report
Question 1 of 50
What are two basic services provided by all cloud providers? Each
correct answer presents a complete solution.
Correct Answer
 compute
 storage

All cloud providers provide compute and storage services. Colocation

is when a business rents space in a shared physical datacenter.
Application development is the responsibility of the customer and is
typically done either in-house or through a third party.
Describe cloud computing - Training | Microsoft Learn

Question 2 of 50
What are two characteristics of a consumption-based model? Each
correct answer presents a complete solution.
Correct Answer
 no upfront costs
 the ability to stop paying for resources that are no longer used

In a consumption-based model, you do not pay for anything until you

start using resources, and you only pay for what you use. If you stop
using a resource, you stop paying for it. High expenditures are usually
associated with the purchase of the physical infrastructure, which is
not needed in a consumption-based model.
Describe cloud computing - Training | Microsoft Learn

Question 3 of 50
What is an advantage of cloud computing compared to on-premises
deployments?
Correct Answer
 You can scale more quickly.

Cloud computing allows you to scale more quickly. Owning your own
CPUs and having full access in the event of an internet outage are not
features of cloud computing. Working from multiple workstations is
not specific to cloud computing compared to an on-premises
deployment.
Describe cloud computing - Training | Microsoft Learn

Question 4 of 50
Which cloud deployment model are you using if you have servers
physically located at your organization’s on-site datacenter, and you
migrate a few of the servers to the cloud?
Correct Answer
 hybrid cloud
A hybrid cloud is a computing environment that combines a public
cloud and a private cloud by allowing data and applications to be
shared between them.
Describe cloud computing - Training | Microsoft Learn

Question 5 of 50
Select the answer that correctly completes the sentence.
Increasing compute capacity for an app by adding RAM or CPUs to a
virtual machine is called [answer choice].
Correct Answer
 vertical scaling

You scale vertically to increase compute capacity by adding RAM or

CPUs to a virtual machine. Scaling horizontally increases compute
capacity by adding instances of resources, such as adding virtual
machines to the configuration. Disaster recovery keeps data and
other assets safe in the event of a disaster. High availability
minimizes downtime when things go wrong.
Describe the benefits of using cloud services - Training | Microsoft
Learn

Question 6 of 50
Select the answer that correctly completes the sentence.
An example of [answer choice] is automatically scaling an
application to ensure that the application has the resources needed to
meet customer demands.
Correct Answer
 elasticity

Elasticity refers to the ability to scale resources as needed, such as

during business hours, to ensure that an application can keep up with
demand, and then reducing the available resources during off-peak
hours. Agility refers to the ability to deploy new applications and
services quickly. High availability refers to the ability to ensure that a
service or application remains available in the event of a failure. Geo-
distribution makes a service or application available in multiple
geographic locations that are typically close to your users.
Describe the benefits of using cloud services - Training | Microsoft
Learn

Question 7 of 50
Select the answer that correctly completes the sentence.
Increasing the capacity of an application by adding additional virtual
machine is called [answer choice].
Correct Answer
 horizontal scaling
Scaling horizontally increases compute capacity by adding instances
of resources, such as adding virtual machines to the configuration.
You scale vertically to increase compute capacity by adding RAM or
CPUs to a virtual machine. Agility refers to the ability to deploy new
applications and services quickly. High availability minimizes
downtime when things go wrong.
Describe the benefits of using cloud services - Training | Microsoft
Learn

Question 8 of 50
Which cloud service model provides you with the most control over
the hardware that runs applications?
Correct Answer
 infrastructure as a service (IaaS)

IaaS is the most flexible category of cloud services. It aims to give you
complete control over the hardware that runs applications. Users do
not control the operating system and do not configure the underlying
servers in PaaS. With SaaS, you are using as-is software hosted in the
cloud, instead of creating a platform to host a software yourself.
Describe cloud service types - Training | Microsoft Learn

Question 9 of 50
Which type of cloud service model is typically licensed through a
monthly or annual subscription?
Correct Answer
 software as a service (SaaS)

SaaS is software that is centrally hosted and managed for you and
your users or customers. Usually, one version of the application is
used for all customers, and it is licensed through a monthly or annual
subscription. PaaS and IaaS use a consumption-based model, so you
only pay for what you use.
Describe cloud service types - Training | Microsoft Learn

Question 10 of 50
In which cloud service model is the customer responsible for
managing the operating system?
Correct Answer
 Infrastructure as a service (IaaS)

IaaS consists of virtual machines and networking provided by the

cloud provider. The customer is responsible for the OS and
applications. The cloud provider is responsible for the OS in PaaS and
SaaS.
Describe cloud service types - Training | Microsoft Learn
Question 11 of 50
What is the customer responsible for in a software as a service (SaaS)
model?
Correct Answer
 data and access

SaaS allows you to pay to use an existing application on hardware

managed by a third party. You supply data and configure access.
Customers are only responsible for storage in a private cloud.
Customers are responsible for virtual machines and runtime in IaaS
and the private cloud.
Describe cloud service types - Training | Microsoft Learn

Question 12 of 50
Your organization is building a custom application.
You need to focus on application development rather than
configuration and management of servers.
Which cloud service model should you use?
Correct Answer
 platform as a service (PaaS)

With PaaS, users can focus on application development because the

cloud provider handles all the platform management. In SaaS, the
cloud provider manages all aspects of the application environment,
such as virtual machines, networking resources, data storage, and
applications. IaaS is the closest service model to managing physical
servers.
Describe cloud service types - Training | Microsoft Learn

Question 13 of 50
Which cloud service model is used by Microsoft Office 365?
Correct Answer
 software as a service (SaaS)

SaaS allows users to connect to and use cloud-based apps over the
internet. Common examples are email, calendaring, and Office tools,
such as Office 365.
Describe cloud service types - Training | Microsoft Learn

Question 14 of 50
Which type of cloud service are virtual networks?
Correct Answer
 infrastructure as a service (IaaS)
IaaS helps you reduce the cost and complexity of maintaining a
physical server and its datacenter infrastructure. Virtual networks are
part of the IaaS cloud service.
Describe cloud service types - Training | Microsoft Learn

Question 15 of 50
For which resource does Azure generate separate billing reports and
invoices by default?
Correct Answer
 subscriptions

Azure generates separate billing reports and invoices for each

subscription so that you can organize and manage costs. Resource
groups can be used to group costs, but you will not receive a separate
invoice for each resource group. Management groups are used to
efficiently manage access, policies, and compliance for subscriptions.
You can set up billing profiles to roll up subscriptions into invoice
sections, but this requires customization.
Describe the core architectural components of Azure - Training |
Microsoft Learn

Question 16 of 50
Which Azure component allows you to replicate resources across a
geography to ensure business continuity during a natural disaster at
the primary site?
Correct Answer
 region pairs

Region pairs allow the replication of Azure resources across

geographies to help ensure that a secondary region is available in
case of any disaster at the primary region.
Describe the core architectural components of Azure - Training |
Microsoft Learn

Question 17 of 50
Which resource can you use to manage access, policies, and
compliance across multiple subscriptions?
Correct Answer
 management groups

Management groups can be used in environments that have multiple

subscriptions to streamline the application of governance conditions.
Resource groups can be used to organize Azure resources.
Administrative units are used to delegate the administration of
Microsoft Entra resources, such as users and [Link] are
used to provide access to resources.
Describe the core architectural components of Azure - Training |
Microsoft Learn
Question 18 of 50
Select the answer that correctly completes the sentence.
[Answer choice] is the deployment and management service for
Azure.
Correct Answer
 Azure Resource Manager (ARM)

ARM is the deployment and management service for Azure. It

provides a management layer that enables you to create, update, and
delete resources in an Azure subscription. You use management
features, such as access control, resource locks, and resource tags, to
secure and organize resources after deployment.
Describe the core architectural components of Azure - Training |
Microsoft Learn

Question 19 of 50
Which Azure compute service can you use to deploy and manage a
set of identical virtual machines?
Correct Answer
 Azure Virtual Machine Scale Sets

Virtual Machine Scale Sets are an Azure compute resource that you
can use to deploy and manage and scale a set of identical virtual
machines.
Describe Azure compute and networking services - Training |
Microsoft Learn

Question 20 of 50
Which scenario is a use case for a VPN gateway?
Correct Answer
 connecting an on-premises datacenter to an Azure virtual
network
A VPN gateway is a type of virtual network gateway. Azure VPN
Gateway instances are deployed to a dedicated subnet of a virtual
network. You can use them to connect on-premises datacenters to
virtual networks through a Site-to-Site (S2S) VPN connection.
Describe Azure compute and networking services - Training |
Microsoft Learn

Question 21 of 50
What can you use to connect Azure resources, such as Azure SQL
databases, to an Azure virtual network?
Correct Answer
 service endpoints
Service endpoints are used to expose Azure services to a virtual
network, providing communication between the two. ExpressRoute is
used to connect an on-premises network to Azure. NSGs allow you to
configure inbound and outbound rules for virtual networks and virtual
machines. Peering allows you to connect virtual networks together.
Describe Azure compute and networking services - Training |
Microsoft Learn

Question 22 of 50
Which two services can you use to establish network connectivity
between an on-premises network and Azure resources? Each correct
answer presents a complete solution.
Correct Answer
 Azure VPN Gateway
 ExpressRoute

ExpressRoute connections and Azure VPN Gateway are two services

that you can use to connect an on-premises network to Azure. Bastion
provides a web interface to remotely administer Azure virtual
machines by using SSH/RDP. Azure Firewall is a stateful firewall
service used to protect virtual networks.
Azure ExpressRoute: Connectivity models | Microsoft Learn
Describe Azure compute and networking services - Training |
Microsoft Learn

Question 23 of 50
What can you use to provide Mac and Android users with access to a
Windows environment that will run Windows-based applications?
Correct Answer
 Azure Virtual Desktop

Azure Virtual Desktop is a desktop and application virtualization

service that runs in the cloud. It enables your users to use a cloud-
hosted version of Windows from any location. Azure Virtual Desktop
works across devices such as Windows, Mac, iOS, Android, and Linux.
It works with apps that you can use to access Remote Desktops and
apps. You can also use most modern browsers to access Azure Virtual
Desktop-hosted experiences.
Describe Azure compute and networking services - Training |
Microsoft Learn

Question 24 of 50
Which Azure Blob storage tier stores data offline and offers the lowest
storage costs and the highest costs to access data?
Correct Answer
 Archive

The Archive storage tier stores data offline and offers the lowest
storage costs, but also the highest costs to rehydrate and access
data. The Hot storage tier is optimized for storing data that is
accessed frequently. Data in the Cool access tier can tolerate slightly
lower availability, but still requires high durability, retrieval latency,
and throughput characteristics similar to hot data.
Describe Azure storage services - Training | Microsoft Learn

Question 25 of 50
Which storage service offers fully managed file shares in the cloud
that are accessible by using Server Message Block (SMB) protocol?
Correct Answer
 Azure Files

Azure Files offers fully managed file shares in the cloud with shares
that are accessible by using Server Message Block (SMB) protocol.
Mounting Azure file shares is just like connecting to shares on a local
network.
Describe Azure storage services - Training | Microsoft Learn

Question 26 of 50
Which Azure Blob storage service tier has the highest storage costs
and the fastest access times for reading and writing data?
Correct Answer
 Hot

The Hot tier is optimized for storing data that is accessed frequently.
The Cool access tier has a slightly lower availability SLA and higher
access costs compared to hot data, which are acceptable trade-offs
for lower storage costs. Archive storage stores data offline and offers
the lowest storage costs, but also the highest costs to rehydrate and
access data.
Describe Azure storage services - Training | Microsoft Learn

Question 27 of 50
Which Azure Storage service should you use to store unstructured
files, such as images, that will be served on webpages?
Correct Answer
 Azure Blob storage
Azure Blob storage is an object storage solution that you can use to
store massive amounts of unstructured data, such as text or binary
data.
Describe Azure storage services - Training | Microsoft Learn

Question 28 of 50
What enables a user to sign in one time and use that credential to
access multiple resources and applications from different providers?
Correct Answer
 single sign-on (SSO)

SSO enables a user to sign in one time and use that credential to
access multiple resources and applications from different providers.
MFA is a process whereby a user is prompted during the sign-in
process for an additional form of identification. Conditional Access is a
tool that Microsoft Entra uses to allow or deny access to resources
based on identity signals. Microsoft Entra supports the registration of
devices.
Describe Azure identity, access, and security - Training | Microsoft
Learn

Question 29 of 50
What can you use to ensure that a user can only access applications
from compliant devices?
Correct Answer
 Conditional Access

Conditional Access is a feature that Microsoft Entra uses to allow or

deny access to resources based on identity signals, such as the
device being used. SSO enables a user to sign in one time and use
that credential to access multiple resources and applications from
different providers. MFA is a process whereby a user is prompted
during the sign-in process for an additional form of identification.
Hybrid identity solutions create a common user identity for
authentication and authorization to all resources, regardless of
location.
Describe Azure identity, access, and security - Training | Microsoft
Learn

Question 30 of 50
What can you use to allow a user to manage all the resources in a
resource group?
Correct Answer
 Azure role-based access control (RBAC)
Azure RBAC allows you to assign a set of permissions to a user or
group. Resource tags are used to locate and act on resources
associated with specific workloads, environments, business units, and
owners. Resource locks prevent the accidental change or deletion of a
resource. Key Vault is a centralized cloud service for storing an
application secrets in a single, central location.
Describe Azure identity, access, and security - Training | Microsoft
Learn

Question 31 of 50
What Microsoft Entra feature can you use to configure security
authentication that requires users to use their mobile phone to sign
in?
Correct Answer
 multi-factor authentication (MFA)

MFA is the concept of requiring something more than only a password

to sign in to an application. You can use the mobile phone to receive a
phone call, text, or a code to get authenticated.
Describe Azure identity, access, and security - Training | Microsoft
Learn

Question 32 of 50
What can you use to sync identities from an on-premises Active
Directory Domain Services (AD DS) domain to Microsoft Entra tenant?
Correct Answer
 Microsoft Entra Connect

Microsoft Entra Connect syncs user identities from an on-premises

Active Directory Domain Services (AD DS) domain to Microsoft Entra.
Microsoft Entra Connect allows you to use features such as single
sign-on (SSO), MFA, and self-service password reset (SSPR) in both
systems. SSPR prevents users from using known compromised
passwords.
Describe Azure identity, access, and security - Training | Microsoft
Learn

Question 33 of 50
What can you use to ensure that users authenticate by using multi-
factor authentication (MFA) when they attempt to sign in from a
specific location?
Correct Answer
 Conditional Access
Conditional Access can use signals to determine information about
authentication attempts, and then determine whether to block access
or require additional verifications, such as MFA.
Describe Azure identity, access, and security - Training | Microsoft
Learn

Question 34 of 50
You need to compare the costs of running an application in an on-
premises datacenter with the costs of running the application in
Azure.
What should you use to assist you?
Correct Answer
 Total Cost of Ownership (TCO) Calculator

The TCO Calculator helps you estimate the cost savings over time of
operating a solution in Azure compared to operating in an on-
premises datacenter.
Describe cost management in Azure - Training | Microsoft Learn

Question 35 of 50
You plan to build a new solution in Azure that will use platform as a
service (PaaS) products.
What should you use to estimate the monthly costs?
Correct Answer
 Azure Pricing calculator

The Azure Pricing calculator allows you to estimate and configure

according to your specific requirements. You will then receive a
consolidated estimated price and a detailed breakdown of the costs
associated with each resource you added to your solution.
Describe cost management in Azure - Training | Microsoft Learn

Question 36 of 50
Which two features are available by using Azure Cost Management +
Billing? Each correct answer presents a complete solution.
Correct Answer
 Create and manage budgets.
 Generate historical reports and forecast future usage.

Azure Cost Management allows you to create and manage cost and
usage budgets by monitoring resource demand trends, consumption
rates, and cost patterns. It also allows you to use historical data to
generate reports and forecast future usage and expenditures.
Describe cost management in Azure - Training | Microsoft Learn

Question 37 of 50
You have an Azure virtual machine that is accessed only between
9:00 and 17:00 each day.
What should you do to minimize costs but preserve the associated
hard disks and data?
Correct Answer
 Deallocate the virtual machine when it is not needed

If you have virtual machine workloads that are used only during
certain periods, but you run them every hour of every day, then you
are wasting money. These virtual machines are great candidates to
deallocate when not in use and start back when required to save
compute costs while the virtual machines are deallocated.
Describe cost management in Azure - Training | Microsoft Learn

Question 38 of 50
You need to associate the costs of resources to different groups within
an organization without changing the location of the resources.
What should you use?
Correct Answer
 resource tags

Resource tags can be used to group billing data and categorize costs
by runtime environment, such as billing usage for virtual machines
running in a production environment.
Tag resources, resource groups, and subscriptions for logical
organization - Azure Resource Manager | Microsoft Learn
Describe the purpose of tags - Training | Microsoft Learn

Question 39 of 50
Your organization plans to deploy several production virtual machines
that will have consistent resource usage throughout the year.
What can you use to minimize the costs of the virtual machines
without reducing the functionality of the virtual machines?
Correct Answer
 Azure Reservations

Azure Reservations offers discounted prices on certain Azure services.

Azure Reservations can save you up to 72 percent compared to pay-
as-you-go prices. To receive a discount, you can reserve services and
resources by paying in [Link] limits can suspend a
subscription when the spend limit is reached.
Describe cost management in Azure - Training | Microsoft Learn
Question 40 of 50
You need to ensure that multi-factor authentication (MFA) is enabled
on accounts with write permissions in an Azure subscription.
What should you implement?
Correct Answer
 Azure Policy

Azure Policy is a service in Azure that enables you to create, assign,

and manage policies that control or audit resources.
Describe features and tools in Azure for governance and compliance -
Training | Microsoft Learn

Question 41 of 50
What can you use to define the resources you want to provision in a
declarative JSON format?
Correct Answer
 Azure Resource Manager (ARM) templates

By using ARM templates, you can describe the resources you want to
use in a declarative JSON format.
Describe features and tools for managing and deploying Azure
resources - Training | Microsoft Learn

Question 42 of 50
Which management layer accepts requests from any Azure tool or API
and enables you to create, update, and delete resources in an Azure
account?
Correct Answer
 Azure Resource Manager (ARM)

ARM is the deployment and management service for Azure. It

provides a management layer that enables you to create, update, and
delete resources in an Azure account.
Describe features and tools for managing and deploying Azure
resources - Training | Microsoft Learn

Question 43 of 50
Which two tools are accessible via Azure Cloud Shell to manage an
Azure environment?
Correct Answer
 Azure CLI
 Azure PowerShell

Azure CLI is an executable program with which a user can execute

commands in Bash that call the Azure REST API. Azure Cloud Shell
also supports Azure PowerShell as an executable program.
Describe features and tools for managing and deploying Azure
resources - Training | Microsoft Learn
Question 44 of 50
What should you use to access Azure Cloud Shell?
Correct Answer
 a web browser
Cloud Shell is an interactive, browser-accessible shell for managing
Azure resources.
Describe features and tools for managing and deploying Azure
resources - Training | Microsoft Learn

Question 45 of 50
Which two tools can you use to create a new Azure virtual machine
from a mobile device that runs Android? Each correct answer presents
complete solution.
Correct Answer
 PowerShell in Azure Cloud Shell
 the Azure portal

The Azure portal can run on devices that have the Android operating
system installed. The browser can be any type, such as Internet
Explorer 11, Chrome, Firefox, or Safari (all the latest versions). When
you visit the portal, you will see Cloud Shell. Users can then access
Bash and PowerShell from within Cloud Shell. You can use Bash and
PowerShell to create Azure virtual machines.
Connect to Azure Virtual Desktop with the Remote Desktop client for
Android and Chrome OS - Azure Virtual Desktop | Microsoft Learn
Describe features and tools for managing and deploying Azure
resources - Training | Microsoft Learn

Question 46 of 50
What can you use to manage servers across third party cloud
platforms and on-premises environments?

Correct Answer
 Azure Arc

Azure Arc simplifies governance and management by delivering a

consistent multi-cloud and on-premises management platform.
Describe features and tools for managing and deploying Azure
resources - Training | Microsoft Learn
Describe the purpose of Azure Arc - Training | Microsoft Learn
Question 47 of 50
What provides recommendations to reduce the cost of Azure
resources?
Correct Answer
 Azure Advisor

Azure Advisor analyzes the account usage and makes

recommendations based on its set and configured rules.
Describe monitoring tools in Azure - Training | Microsoft Learn

Question 48 of 50
You need to create a custom solution that uses thresholds to trigger
autoscaling functionality to scale an app up or down to meet user
demand.
What should you include in the solution?
Correct Answer
 Azure Monitor

Azure Monitor is a platform that collects metric and logging data, such
as CPU percentages. The data can be used to trigger autoscaling.
Describe monitoring tools in Azure - Training | Microsoft Learn

Question 49 of 50
What can you use to automatically detect performance anomalies for
web apps?
 Azure Application Insights

Application Insights is a feature of Azure Monitor that allows you to

monitor running applications, automatically detect performance
anomalies, and use built-in analytics tools to see what users do on an
app.
Describe monitoring tools in Azure - Training | Microsoft Learn

Question 50 of 50
Which feature in the Microsoft Purview governance portal should you
use to manage access to data sources and datasets?
Correct Answer
 Data Policy

Incorrect: Data Catalog –– This enables data discovery.

Incorrect: Data Sharing –– This shares data within and between
organizations.
Incorrect: Data Estate Insights –– This accesses data estate health.
Correct: Data Policy –– This governs access to data.
Introduction to Microsoft Purview governance solutions - Microsoft
Purview | Microsoft Learn
Describe features and tools in Azure for governance and compliance -
Training | Microsoft Learn