Question 1 of 50

What are two basic services provided by all cloud providers? Each
correct answer presents a complete solution.
Correct Answer
 compute
 storage

All cloud providers provide compute and storage services. Colocation

is when a business rents space in a shared physical datacenter.
Application development is the responsibility of the customer and is
typically done either in-house or through a third party.
Describe cloud computing - Training | Microsoft Learn

Question 2 of 50
What are two characteristics of the public cloud deployment model?
Each correct answer presents a complete solution.
Correct Answer
 Servers and storage are owned and operated by a third-party
cloud service provider.
 Services are offered over the internet and are available to
anyone who wants to purchase them.

In a public cloud, services are offered over the internet and are
available to anyone who wants to purchase them. A private cloud is
limited to a single organization. Cloud resources, such as servers and
storage, are owned and operated by a third-party cloud service
provider and delivered over the internet. A private cloud consists of
computing resources used exclusively by users from one business or
organization.
Describe cloud computing - Training | Microsoft Learn

Question 3 of 50
What are two characteristics of a consumption-based model? Each
correct answer presents a complete solution.
Correct Answer
 no upfront costs
 the ability to stop paying for resources that are no longer used

In a consumption-based model, you do not pay for anything until you

start using resources, and you only pay for what you use. If you stop
using a resource, you stop paying for it. High expenditures are usually
associated with the purchase of the physical infrastructure, which is
not needed in a consumption-based model.
Describe cloud computing - Training | Microsoft Learn

Question 4 of 50
Which two characteristics are common advantages of cloud
computing? Each correct answer presents a complete solution.
Correct Answer
 geo-distribution
 high availability
Cloud-based apps can provide a continuous user experience with no
apparent downtime, even when things go wrong. You can deploy apps
and data to regional datacenters around the globe, thereby ensuring
that your customers always have the best performance in their
region. Apps in cloud computing can scale vertically and horizontally.
In a public cloud model, you do not get physical access to servers, as
they are managed by the cloud provider.
Describe cloud computing - Training | Microsoft Learn

Question 5 of 50
Select the answer that correctly completes the sentence.
[Answer choice] refers to upfront costs incurred one time, such as
hardware purchases.
Correct Answer
 Capital expenditures

Capital expenditures are one-time expenses that can be deducted

over time. Operational expenditures are billed as you use services
and a do not have upfront costs.
Describe cloud computing - Training | Microsoft Learn

Question 6 of 50
Which cloud deployment model are you using if you have servers
physically located at your organization’s on-site datacenter, and you
migrate a few of the servers to the cloud?
Correct Answer
 hybrid cloud

A hybrid cloud is a computing environment that combines a public

cloud and a private cloud by allowing data and applications to be
shared between them.
Describe cloud computing - Training | Microsoft Learn

Question 7 of 50
Select the answer that correctly completes the sentence.
Deploying and configuring cloud-based resources quickly as business
requirements change is called [answer choice].
Correct Answer
 agility

Agility means that you can deploy and configure cloud-based

resources quickly as app requirements change. Scalability means that
you can add RAM, CPU, or entire virtual machines to a configuration.
Elasticity means that you can configure cloud-based apps to take
advantage of autoscaling, so apps always have the resources they
need. High availability means that cloud-based apps can provide a
continuous user experience with no apparent downtime, even when
things go wrong.
Describe the benefits of using cloud services - Training | Microsoft
Learn

Question 8 of 50
What is high availability in a public cloud environment dependent on?
Correct Answer
 the service-level agreement (SLA) that you choose

Different services have different SLAs. Sometimes different tiers of

the same service will offer different SLAs, which can increase or
decrease the promised availability.
Describe the benefits of using cloud services - Training | Microsoft
Learn

Question 9 of 50
Select the answer that correctly completes the sentence.
In cloud computing, [answer choice] allows you to deploy
applications to regional datacenters around the world.
Correct Answer
 geo-location

You can deploy apps and data to regional datacenters around the
globe, thereby ensuring that your customers always have the best
performance in their region. This is referred to as geo-distribution.
Describe the benefits of using cloud services - Training | Microsoft
Learn

Question 10 of 50
Select the answer that correctly completes the sentence.
Increasing the capacity of an application by adding additional virtual
machine is called [answer choice].
Correct Answer
 horizontal scaling

Scaling horizontally increases compute capacity by adding instances

of resources, such as adding virtual machines to the configuration.
You scale vertically to increase compute capacity by adding RAM or
CPUs to a virtual machine. Agility refers to the ability to deploy new
applications and services quickly. High availability minimizes
downtime when things go wrong.
Describe the benefits of using cloud services - Training | Microsoft
Learn

Question 11 of 50
In a platform as a service (PaaS) model, which two components are
the responsibility of the cloud service provider? Each correct answer
presents a complete solution.
Correct Answer
 operating system
 physical network

In PaaS, the cloud provider is responsible for the operating system,

physical datacenter, physical hosts, and physical network. In PaaS,
the customer is responsible for accounts and identities.
Describe cloud service types - Training | Microsoft Learn

Question 12 of 50
Which type of cloud service model is typically licensed through a
monthly or annual subscription?
Correct Answer
 software as a service (SaaS)

SaaS is software that is centrally hosted and managed for you and
your users or customers. Usually, one version of the application is
used for all customers, and it is licensed through a monthly or annual
subscription. PaaS and IaaS use a consumption-based model, so you
only pay for what you use.
Describe cloud service types - Training | Microsoft Learn

Question 13 of 50
What uses the infrastructure as a service (IaaS) cloud service model?
Correct Answer
 Azure virtual machines

Azure Virtual Machines is an IaaS offering. The customer is

responsible for the configuration of the virtual machine as well as all
operating system configurations. Azure App Services and Azure
Cosmos DB are PaaS offerings. Microsoft Office 365 is a SaaS offering.
Describe cloud service types - Training | Microsoft Learn

Question 14 of 50
Which type of cloud service are virtual networks?
Correct Answer
 infrastructure as a service (IaaS)
IaaS helps you reduce the cost and complexity of maintaining a
physical server and its datacenter infrastructure. Virtual networks are
part of the IaaS cloud service.
Describe cloud service types - Training | Microsoft Learn

Question 15 of 50
Which two components are created in an Azure subscription? Each
correct answer presents a complete solution.
Correct Answer
 resource groups
 resources

Resources can only be associated with a single subscription.

Subscriptions may be grouped into management groups. An account
may be associated with multiple subscriptions.
Describe the core architectural components of Azure - Training |
Microsoft Learn

Question 16 of 50
For which resource does Azure generate separate billing reports and
invoices by default?
Correct Answer
 subscriptions

Azure generates separate billing reports and invoices for each

subscription so that you can organize and manage costs. Resource
groups can be used to group costs, but you will not receive a separate
invoice for each resource group. Management groups are used to
efficiently manage access, policies, and compliance for subscriptions.
You can set up billing profiles to roll up subscriptions into invoice
sections, but this requires customization.
Describe the core architectural components of Azure - Training |
Microsoft Learn

Question 17 of 50
Which Azure component allows you to replicate resources across a
geography to ensure business continuity during a natural disaster at
the primary site?
Correct Answer
 region pairs

Region pairs allow the replication of Azure resources across

geographies to help ensure that a secondary region is available in
case of any disaster at the primary region.
Describe the core architectural components of Azure - Training |
Microsoft Learn

Question 18 of 50
Which resource can you use to manage access, policies, and
compliance across multiple subscriptions?
Correct Answer
 management groups
Management groups can be used in environments that have multiple
subscriptions to streamline the application of governance conditions.
Resource groups can be used to organize Azure resources.
Administrative units are used to delegate the administration of
Microsoft Entra resources, such as users and [Link] are
used to provide access to resources.
Describe the core architectural components of Azure - Training |
Microsoft Learn

Question 19 of 50
Select the answer that correctly completes the sentence.
[Answer choice] is the deployment and management service for
Azure.
Correct Answer
 Azure Resource Manager (ARM)
ARM is the deployment and management service for Azure. It
provides a management layer that enables you to create, update, and
delete resources in an Azure subscription. You use management
features, such as access control, resource locks, and resource tags, to
secure and organize resources after deployment.
Describe the core architectural components of Azure - Training |
Microsoft Learn

Question 20 of 50
Which two Azure resources can make use of availability zones? Each
correct answer presents a complete solution.
Correct Answer
 Azure SQL databases
 virtual machines
Availability zones are primarily for virtual machines, managed disks,
load balancers, and SQL databases.
Describe the core architectural components of Azure - Training |
Microsoft Learn

Question 21 of 50
Which Azure resource is a software emulation of a physical computer
that includes a virtual processor, memory, storage, and networking
resources?
Correct Answer
 a virtual machine

Virtual machines are software emulations of physical computers. They

include a virtual processor, memory, storage, and networking
resources. Virtual machines host an operating system, and you can
install and run software just like on a physical computer.
Describe Azure compute and networking services - Training |
Microsoft Learn

Question 22 of 50
Which Azure compute service can you use to deploy and manage a
set of identical virtual machines?
Correct Answer
 Azure Virtual Machine Scale Sets
Virtual Machine Scale Sets are an Azure compute resource that you
can use to deploy and manage and scale a set of identical virtual
machines.
Describe Azure compute and networking services - Training |
Microsoft Learn

Question 23 of 50
Which scenario is a use case for a VPN gateway?
Correct Answer
 connecting an on-premises datacenter to an Azure virtual
network

A VPN gateway is a type of virtual network gateway. Azure VPN
Gateway instances are deployed to a dedicated subnet of a virtual
network. You can use them to connect on-premises datacenters to
virtual networks through a Site-to-Site (S2S) VPN connection.
Describe Azure compute and networking services - Training |
Microsoft Learn

Question 24 of 50
What can you use to connect Azure resources, such as Azure SQL
databases, to an Azure virtual network?
Correct Answer
 service endpoints

Service endpoints are used to expose Azure services to a virtual

network, providing communication between the two. ExpressRoute is
used to connect an on-premises network to Azure. NSGs allow you to
configure inbound and outbound rules for virtual networks and virtual
machines. Peering allows you to connect virtual networks together.
Describe Azure compute and networking services - Training |
Microsoft Learn
Question 25 of 50
Which storage service should you use to store thousands of files
containing text and images?
Correct Answer
 Azure Blob storage

Azure Blob storage is an object storage solution that you can use to
store massive amounts of unstructured data, such as text or binary
data.
Describe Azure storage services - Training | Microsoft Learn

Question 26 of 50
Which storage service offers fully managed file shares in the cloud
that are accessible by using Server Message Block (SMB) protocol?
Correct Answer
 Azure Files

Azure Files offers fully managed file shares in the cloud with shares
that are accessible by using Server Message Block (SMB) protocol.
Mounting Azure file shares is just like connecting to shares on a local
network.
Describe Azure storage services - Training | Microsoft Learn

Question 27 of 50
Which two scenarios are common use cases for Azure Blob storage?
Each correct answer presents a complete solution.
Correct Answer
 serving images or documents directly to a browser
 storing data for backup and restore

Low storage costs and unlimited file formats make blob storage a
good location to store backups and archives. Blob storage can be
reached from anywhere by using an internet connection. Azure Disk
Storage provides disks for Azure virtual machines. Azure Files
supports mounting file storage shares.
Describe Azure storage services - Training | Microsoft Learn

Question 28 of 50
Which two protocols can be used to access Azure file shares? Each
correct answer presents a complete solution.
Correct Answer
 Network File System (NFS)
 Server Message Block (SMB)

Azure Files offers fully managed file shares in the cloud that are
accessible via industry-standard SMB and NFS protocols.
Describe Azure storage services - Training | Microsoft Learn

Question 29 of 50
What is the purpose of defense in depth?
Correct Answer
 to use several layers of protection to prevent information from
being accessed by unauthorized users

The objective of defense in depth is to use several layers of protection

to prevent information from being accessed or stolen by unauthorized
users.
Describe Azure identity, access, and security - Training | Microsoft
Learn

Question 30 of 50
What can you use to allow a user to manage all the resources in a
resource group?
Correct Answer
 Azure role-based access control (RBAC)

Azure RBAC allows you to assign a set of permissions to a user or

group. Resource tags are used to locate and act on resources
associated with specific workloads, environments, business units, and
owners. Resource locks prevent the accidental change or deletion of a
resource. Key Vault is a centralized cloud service for storing an
application secrets in a single, central location.
Describe Azure identity, access, and security - Training | Microsoft
Learn

Question 31 of 50
What Microsoft Entra feature can you use to configure security
authentication that requires users to use their mobile phone to sign
in?
Correct Answer
 multi-factor authentication (MFA)

MFA is the concept of requiring something more than only a password

to sign in to an application. You can use the mobile phone to receive a
phone call, text, or a code to get authenticated.
Describe Azure identity, access, and security - Training | Microsoft
Learn

Question 32 of 50
Which Microsoft Entra feature can you use to ensure that users can
only access Microsoft Office 365 applications from approved client
applications?
Correct Answer
 Conditional Access
Conditional Access allows administrators to control, allow, or deny
access to resources based on certain signals. You can require that
access to certain applications only be allowed if the users are using
an approved client application. MFA is a process whereby a user is
prompted during the sign-in process for an additional form of
identification. Examples include a code on their mobile phone or a
fingerprint scan.
Describe Azure identity, access, and security - Training | Microsoft
Learn
Question 33 of 50
What can you use to sync identities from an on-premises Active
Directory Domain Services (AD DS) domain to Microsoft Entra tenant?
Correct Answer
 Microsoft Entra Connect

Microsoft Entra Connect syncs user identities from an on-premises

Active Directory Domain Services (AD DS) domain to Microsoft Entra.
Microsoft Entra Connect allows you to use features such as single
sign-on (SSO), MFA, and self-service password reset (SSPR) in both
systems. SSPR prevents users from using known compromised
passwords.
Describe Azure identity, access, and security - Training | Microsoft
Learn

Question 34 of 50
You need to compare the costs of running an application in an on-
premises datacenter with the costs of running the application in
Azure.
What should you use to assist you?
Correct Answer
 Total Cost of Ownership (TCO) Calculator

The TCO Calculator helps you estimate the cost savings over time of
operating a solution in Azure compared to operating in an on-
premises datacenter.
Describe cost management in Azure - Training | Microsoft Learn

Question 35 of 50
Which are two common scenarios for using resource tags? Each
correct answer presents a complete solution.
Correct Answer
 associating costs with different environments
 categorizing costs by department

You can use tags to categorize costs by department, such as human

resources, marketing, or finance, or by environment, such as test or
production. Resizing underutilized virtual machines is a good cost
saving measure and provisioning resources in lower cost regions is a
good practice, but resource tags do not help with this.
Describe cost management in Azure - Training | Microsoft Learn

Question 36 of 50
You plan to build a new solution in Azure that will use platform as a
service (PaaS) products.
What should you use to estimate the monthly costs?
Correct Answer
 Azure Pricing calculator

The Azure Pricing calculator allows you to estimate and configure

according to your specific requirements. You will then receive a
consolidated estimated price and a detailed breakdown of the costs
associated with each resource you added to your solution.
Describe cost management in Azure - Training | Microsoft Learn

Question 37 of 50
You have an Azure virtual machine that is accessed only between
9:00 and 17:00 each day.
What should you do to minimize costs but preserve the associated
hard disks and data?
Correct Answer
 Deallocate the virtual machine when it is not needed

If you have virtual machine workloads that are used only during
certain periods, but you run them every hour of every day, then you
are wasting money. These virtual machines are great candidates to
deallocate when not in use and start back when required to save
compute costs while the virtual machines are deallocated.
Describe cost management in Azure - Training | Microsoft Learn

Question 38 of 50
Your organization plans to deploy several production virtual machines
that will have consistent resource usage throughout the year.
What can you use to minimize the costs of the virtual machines
without reducing the functionality of the virtual machines?
Correct Answer
 Azure Reservations

Azure Reservations offers discounted prices on certain Azure services.

Azure Reservations can save you up to 72 percent compared to pay-
as-you-go prices. To receive a discount, you can reserve services and
resources by paying in [Link] limits can suspend a
subscription when the spend limit is reached.
Describe cost management in Azure - Training | Microsoft Learn

Question 39 of 50
What can be applied to a resource to prevent accidental deletion?
Correct Answer
 a resource lock

A resource lock prevents resources from being accidentally deleted or

changed. Resource tags offer the custom grouping of resources.
Policies enforce different rules across all resource configurations so
that the configurations stay compliant with corporate standards. An
initiative is a way of grouping related policies together.
Describe features and tools in Azure for governance and compliance -
Training | Microsoft Learn

Question 40 of 50
What can you use to ensure that new and existing Azure resources
stay in compliance with corporate standards?
Correct Answer
 Azure Policy

Azure Policy is a service in Azure that enables you to create, assign,

and manage policies that control or audit resources. These policies
enforce different rules across all resource configurations so that the
configurations stay compliant with corporate standards.
Describe features and tools in Azure for governance and compliance -
Training | Microsoft Learn

Question 41 of 50
You need to ensure that multi-factor authentication (MFA) is enabled
on accounts with write permissions in an Azure subscription.
What should you implement?
Correct Answer
 Azure Policy
Azure Policy is a service in Azure that enables you to create, assign,
and manage policies that control or audit resources.
Describe features and tools in Azure for governance and compliance -
Training | Microsoft Learn

Question 42 of 50
What can you use to restrict the deployment of a virtual machine to a
specific location?
Correct Answer
 Azure Policy
Azure Policy can help to create a policy for allowed regions, which
enables you to restrict the deployment of virtual machines to a
specific location.
Overview of Azure Policy - Azure Policy | Microsoft Learn
Describe the purpose of Azure Policy - Training | Microsoft Learn
Question 43 of 50
What can you use to define the resources you want to provision in a
declarative JSON format?
Correct Answer
 Azure Resource Manager (ARM) templates

By using ARM templates, you can describe the resources you want to
use in a declarative JSON format.
Describe features and tools for managing and deploying Azure
resources - Training | Microsoft Learn

Question 44 of 50
Which two tools are accessible via Azure Cloud Shell to manage an
Azure environment?
Correct Answer
 Azure CLI
 Azure PowerShell

Azure CLI is an executable program with which a user can execute

commands in Bash that call the Azure REST API. Azure Cloud Shell
also supports Azure PowerShell as an executable program.
Describe features and tools for managing and deploying Azure
resources - Training | Microsoft Learn

Question 45 of 50
What can you use to create resources in Azure and includes a
validation step to ensure all resources are created in a specific order
based on dependencies, in parallel and idempotent?
Correct Answer
 Azure Resource Manager (ARM) templates

ARM templates define an application's infrastructure requirements for

a repeatable deployment that is done in a consistent manner. A
validation step ensures that all resources can be created in the proper
order based on dependencies, in parallel and idempotent.
Describe features and tools for managing and deploying Azure
resources - Training | Microsoft Learn

Question 46 of 50
What can you use to manage servers across third party cloud
platforms and on-premises environments?
Correct Answer
 Azure Arc

Azure Arc simplifies governance and management by delivering a

consistent multi-cloud and on-premises management platform.
Describe features and tools for managing and deploying Azure
resources - Training | Microsoft Learn
Describe the purpose of Azure Arc - Training | Microsoft Learn

Question 47 of 50

You need to be notified when there are new recommendations for

reducing Azure costs.

What should you recommend?

Correct Answer
 Azure CLI

Azure CLI allows you to use the Bash shell to perform administrative
tasks. Bash is used in Linux environments, so a Linux administrator
will probably be more comfortable performing command-line
administration from Azure CLI.
Describe features and tools for managing and deploying Azure
resources - Training | Microsoft Learn

Question 48 of 50
You need to review the root cause analysis (RCA) report for a service
outage that occurred last week.
Where should you look for the report?
Correct Answer
 Azure Service Health

After an outage, Service Health provides official incident reports

called root cause analysis (RCA), which you can share with
stakeholders.
Describe monitoring tools in Azure - Training | Microsoft Learn
Question 49 of 50
What can you use to find information about planned maintenance for
Azure services that are critical to your organization?
Correct Answer
 Azure Service Health

You can drill down to the affected services, regions, and details to
show how an event will affect you and what you must do. Most of
these events occur without any impact to you and will not be shown.
In a rare case that a reboot is required, Service Health allows you to
choose when to perform the maintenance to minimize the downtime
Describe monitoring tools in Azure - Training | Microsoft Learn

Question 50 of 50
Which feature in the Microsoft Purview governance portal should you
use to manage access to data sources and datasets?
Correct Answer
 Data Policy

Incorrect: Data Catalog –– This enables data discovery.

Incorrect: Data Sharing –– This shares data within and between
organizations.
Incorrect: Data Estate Insights –– This accesses data estate health.
Correct: Data Policy –– This governs access to data.
Introduction to Microsoft Purview governance solutions - Microsoft
Purview | Microsoft Learn
Describe features and tools in Azure for governance and compliance -
Training | Microsoft Learn