Question 1

A global e-commerce startup wants to host its website on Azure and needs to ensure that the site remains available even if an entire data center fails due to a power outage. Which Azure architectural component should they use to distribute their virtual machine instances across different physical locations within a single region?

Accepted Answer

Availability Zones

Answer

Availability Sets

Answer

Resource Groups

Answer

Azure Regions

Question 2

A healthcare provider is moving sensitive patient data to Azure. They need a service that provides a dedicated, private connection between their on-premises data center and Azure, without using the public internet. Which service should they implement?

Accepted Answer

Azure ExpressRoute

Answer

Azure Point-to-Site VPN

Answer

Azure Traffic Manager

Answer

Azure VPN Gateway

Question 3

A banking institution needs to ensure that only specific individuals in the HR department can access employee salary data stored in an Azure SQL Database. Which principle of cloud security involves granting only the minimum permissions required to perform a task?

Accepted Answer

Least Privilege

Answer

Zero Trust

Answer

Shared Responsibility

Answer

Defense in Depth

Question 4

A manufacturing company is migrating to Azure and wants to deploy a solution where they only pay for the time the code actually runs, without managing any underlying servers. Which cloud concept does this represent?

Accepted Answer

Serverless Computing

Answer

Infrastructure as a Service (IaaS)

Answer

Software as a Service (SaaS)

Answer

Platform as a Service (PaaS)

Question 5

An online education platform expects a massive spike in users during final exam week. Which feature of the cloud allows them to automatically increase or decrease resources based on demand?

Accepted Answer

Scalability

Answer

High Availability

Answer

Fault Tolerance

Answer

Agility

Question 6

A retail chain wants to implement a governance strategy that prevents developers from creating expensive 'G' series virtual machines in a development subscription. Which Azure service should be used to enforce these organizational standards?

Accepted Answer

Azure Policy

Answer

Azure Resource Manager

Answer

Role-Based Access Control (RBAC)

Answer

Azure Blueprints

Question 7

A FinTech company is calculating their Total Cost of Ownership (TCO) for moving to Azure. They realize they no longer need to pay for physical servers or cooling. This shift from upfront data center costs to monthly service fees is known as moving from:

Accepted Answer

CapEx to OpEx

Answer

SaaS to IaaS

Answer

Fixed Cost to Variable Cost

Answer

OpEx to CapEx

Question 8

A university department needs to organize their Azure resources into logical groups for billing and management purposes. Which is the highest level in the Azure hierarchy for organizing subscriptions?

Accepted Answer

Management Groups

Answer

Regions

Answer

Resource Groups

Answer

Tenants

Question 9

A large enterprise wants to analyze their Azure spending across different departments. They want to assign a metadata tag to each resource to identify which department 'owns' it. What feature should they use?

Accepted Answer

Azure Tags

Answer

Azure Advisor

Answer

Azure Monitor

Answer

Resource Groups

Question 10

A startup is building a containerized web application and wants a fully managed service to orchestrate their containers without managing the underlying virtual machines. Which service is best suited for this?

Accepted Answer

Azure Kubernetes Service (AKS)

Answer

Azure App Service

Answer

Azure Container Instances

Answer

Azure Virtual Machines

Question 11

The IT team at a manufacturing plant wants to be alerted if a Virtual Machine's CPU usage exceeds 90% for more than 5 minutes. Which Azure service provides this monitoring and alerting capability?

Accepted Answer

Azure Monitor

Answer

Azure Service Health

Answer

Azure Sentinel

Answer

Azure Advisor

Question 12

A healthcare analytics company needs to store unstructured data like images and videos. They need a storage solution that is highly scalable and cost-effective. Which Azure Storage service should they choose?

Accepted Answer

Azure Blob Storage

Answer

Azure Table Storage

Answer

Azure Files

Answer

Azure Disk Storage

Question 13

A software development firm wants to deploy a pilot project and get recommendations on how to reduce their current Azure spend and improve security. Which tool provides automated best-practice recommendations?

Accepted Answer

Azure Advisor

Answer

Azure Monitor

Answer

Azure Cost Management

Answer

Azure Security Center

Question 14

An e-commerce company is preparing for a site migration. They want to ensure that even if an entire Azure Region becomes unavailable due to a natural disaster, their database remains online in a different geographic location. What is this capability called?

Accepted Answer

Disaster Recovery

Answer

Scalability

Answer

Elasticity

Answer

High Availability

Question 15

A banking app developer wants to ensure that users can sign in using their social media accounts like Google or Facebook. Which Azure service provides this Identity as a Service (IDaaS) capability?

Accepted Answer

Azure Active Directory B2C

Answer

Azure Key Vault

Answer

Azure AD Domain Services

Answer

Azure Active Directory (Standard)

Question 16

A medical research team needs to run a high-performance computing (HPC) workload that requires thousands of CPU cores for a short duration. Which feature allows them to quickly provision and manage a large group of identical VMs?

Accepted Answer

Azure Virtual Machine Scale Sets

Answer

Azure Resource Groups

Answer

Azure App Service

Answer

Azure Batch

Question 17

A government agency requires that all data stored in Azure be encrypted using keys that they manage themselves. Which service should they use to store and manage these cryptographic keys securely?

Accepted Answer

Azure Key Vault

Answer

Azure Dedicated Host

Answer

Azure Storage Service Encryption

Answer

Azure Security Center

Question 18

In the Azure Shared Responsibility Model, if a company uses 'Infrastructure as a Service' (IaaS), who is responsible for managing and patching the operating system (OS) of the virtual machines?

Accepted Answer

The Customer

Answer

The hardware manufacturer

Answer

Microsoft

Answer

Both Customer and Microsoft

Question 19

A startup wants to use a NoSQL database that offers single-digit millisecond latency and global distribution for their mobile gaming app. Which Azure service is most appropriate?

Accepted Answer

Azure Cosmos DB

Answer

Azure Database for MySQL

Answer

Azure SQL Database

Answer

Azure Table Storage

Question 20

A construction company wants to connect their IoT devices at various job sites to the cloud to monitor equipment health in real-time. Which Azure service act as a central message hub for bi-directional communication between the IoT application and the devices?

Accepted Answer

Azure IoT Hub

Answer

Azure Service Bus

Answer

Azure Event Grid

Answer

Azure IoT Central

Question 21

A financial company needs to discover and secure sensitive data like credit card numbers across their entire Azure data estate. Which governance service provides automated data discovery and lineage tracking?

Accepted Answer

Microsoft Purview

Answer

Azure Information Protection

Answer

Azure Blueprints

Answer

Azure Policy

Question 22

A software company wants to create a repeatable set of Azure resources including Resource Groups, Role Assignments, and Policy Assignments for every new project they start. Which service best facilitates this environment orchestration?

Accepted Answer

Azure Blueprints

Answer

Azure Resource Manager Templates

Answer

Azure DevTest Labs

Answer

Azure Logic Apps

Question 23

Which Azure benefit allows companies with existing Windows Server or SQL Server licenses to pay a reduced rate for Azure Virtual Machines?

Accepted Answer

Azure Hybrid Benefit

Answer

Enterprise Agreement

Answer

Reserved Instances

Answer

Pay-as-you-go

Question 24

An e-commerce site needs to store temporary session state data and requires extremely high throughput and low-latency access. Which in-memory data store service should they use?

Accepted Answer

Azure Cache for Redis

Answer

Azure SQL Database

Answer

Azure Blob Storage

Answer

Azure Disk Storage

Question 25

What is the primary management layer in Azure that allows you to create, update, and delete resources using a consistent management layer via the Portal, CLI, or PowerShell?

Accepted Answer

Azure Resource Manager (ARM)

Answer

Azure Active Directory

Answer

Azure Cloud Shell

Answer

Azure Service Fabric

Question 26

A logistics company is experiencing unexpected costs in their Azure environment. They want to set up an automated notification that sends an email to the IT Manager whenever their monthly spending reaches 80% of their allocated budget. Which feature within Azure Cost Management and Billing should they use?

Accepted Answer

Budget Alerts

Answer

Billing Tags

Answer

Cost Analysis

Answer

Azure Pricing Calculator

Question 27

A global banking corporation wants to ensure that its administrators can only access the Azure Portal if they are connecting from a managed corporate device and have successfully completed Multi-Factor Authentication (MFA). Which Azure Active Directory (Microsoft Entra ID) feature should they implement to enforce these specific 'if/then' access rules?

Accepted Answer

Conditional Access

Answer

Azure Policy

Answer

Role-Based Access Control (RBAC)

Answer

Azure Privileged Identity Management (PIM)

Question 28

A global news agency needs to host its website content close to its readers worldwide to minimize latency and ensure fast loading times for images and videos. Which Azure service should they use to cache content at 'edge locations' strategically placed around the globe?

Accepted Answer

Azure Content Delivery Network (CDN)

Answer

Azure Load Balancer

Answer

Azure ExpressRoute

Answer

Azure Traffic Manager

Question 29

A company plans to migrate its legacy on-premises web application to Azure. The company wants to minimize administrative effort and hardware management while maintaining control over the operating system and installed software. Which cloud service model should they choose?

Accepted Answer

Infrastructure as a Service (IaaS)

Answer

Function as a Service (FaaS)

Answer

Software as a Service (SaaS)

Answer

Platform as a Service (PaaS)

Question 30

A company is planning to deploy several hundred Virtual Machines (VMs) to Azure. They need a solution to automatically increase or decrease the number of VM instances based on CPU usage. Which Azure service should they use?

Accepted Answer

Azure Virtual Machine Scale Sets

Answer

Azure Availability Zones

Answer

Azure Load Balancer

Answer

Azure Availability Sets

Question 31

A startup wants to host a small website but has no capital to invest in physical servers. They want to pay only for the resources used each month, with lower costs during periods of low traffic. Which characteristic of Cloud Computing does this describe?

Accepted Answer

Consumption-based model

Answer

Resource Pooling

Answer

High Availability

Answer

Capital Expenditure (CapEx)

Question 32

A medical research company needs to store 50 TB of data that is rarely accessed but must be preserved for 10 years for compliance reasons. Which Azure Storage access tier provides the most cost-effective solution?

Accepted Answer

Archive storage

Answer

Hot storage

Answer

Premium storage

Answer

Cool storage

Question 33

An organization needs to ensure that its Azure environment remains compliant with internal corporate standards and prevents the creation of specific resource types in certain regions. Which tool should they use?

Accepted Answer

Azure Policy

Answer

Azure Monitor

Answer

Azure Blueprints

Answer

Role-Based Access Control (RBAC)

Question 34

A developer needs to execute code in response to an HTTP request without managing the underlying server or runtime environment. Which Azure service is the best fit for this 'serverless' requirement?

Accepted Answer

Azure Functions

Answer

Azure Virtual Machines

Answer

Azure App Service

Answer

Azure Container Instances

Question 35

Which Azure benefit ensures that a service will be reachable for a specific percentage of time (e.g., 99.9%)?

Accepted Answer

Service Level Agreement (SLA)

Answer

Azure Advisor

Answer

Service Lifecycle

Answer

Azure Support Plan

Question 36

A company wants to implement a security solution that provides 'Just-In-Time' (JIT) VM access to reduce exposure to brute-force attacks. Which service provides this feature?

Accepted Answer

Microsoft Defender for Cloud

Answer

Azure Front Door

Answer

Azure Bastion

Answer

Azure Active Directory (Entra ID)

Question 37

Which Azure networking component is used to securely connect an on-premises network to an Azure Virtual Network via a dedicated, private connection that does not go over the public internet?

Accepted Answer

Azure ExpressRoute

Answer

Azure Traffic Manager

Answer

Azure DNS

Answer

Azure VPN Gateway

Question 38

To estimate the potential cost savings of migrating an on-premises data center to Azure over a period of 5 years, which tool should be used?

Accepted Answer

Total Cost of Ownership (TCO) Calculator

Answer

Azure Cost Management

Answer

Azure Pricing Calculator

Answer

Azure Advisor

Question 39

A company is planning to migrate several production workloads to Azure. They require a centralized console to collect, analyze, and act on telemetry data from both their Azure and on-premises environments to identify performance issues. Which service should they use?

Accepted Answer

Azure Monitor

Answer

Azure Service Health

Answer

Azure Cosmos DB

Answer

Azure Advisor

Question 40

A company plans to implement a security strategy that verifies every request, regardless of where the request originates or what resource it accesses. They want to ensure that access is granted based on 'least privileged access' principles and explicit verification. Which security concept does this describe?

Accepted Answer

Zero Trust

Answer

Defense in Depth

Answer

Conditional Access

Answer

Single Sign-On (SSO)

Question 41

A company is planning a deployment in Azure and wants to ensure that even if an entire data center fails within a specific region, their application remains available. They want to maintain data residency within that specific geography. Which feature should they use?

Accepted Answer

Availability Zones

Answer

Availability Sets

Answer

Paired Regions

Answer

Resource Groups

Question 42

A company plans to deploy a web application that will be hosted on multiple Virtual Machines across different Azure regions. They need a service to distribute traffic to the closest available regional endpoint based on the DNS protocol. Which Azure service should they implement?

Accepted Answer

Azure Traffic Manager

Answer

Azure Application Gateway

Answer

Azure Bastion

Answer

Azure Load Balancer

Question 43

An organization needs to deploy a website but does not want to manage the underlying server hardware or software updates. They want the cloud provider to handle the operating system and runtime environment. Which cloud service model should they choose?

Accepted Answer

Platform as a Service (PaaS)

Answer

Software as a Service (SaaS)

Answer

On-premises

Answer

Infrastructure as a Service (IaaS)

Question 44

A company is planning to migrate its internal web servers to Azure. They want to ensure that the servers remain available even if a single data center within an Azure region experiences a power failure. Which Azure feature should they use to achieve this?

Accepted Answer

Availability Zones

Answer

Availability Sets

Answer

Resource Groups

Answer

Read-access geo-redundant storage

Question 45

An IT department is tasked with reducing operational costs and wants to shift from a Capital Expenditure (CapEx) model to an Operational Expenditure (OpEx) model. Which of the following is a characteristic of the OpEx model in the context of Azure?

Accepted Answer

Paying for services as you use them without upfront costs

Answer

Managing and maintaining your own physical data centers

Answer

Spending money on physical infrastructure up front

Answer

Deducting the full cost of hardware in a single tax year

Question 46

Your company is planning to use Azure to store large amounts of unstructured data, such as video files and images, that must be accessible from anywhere via HTTP or HTTPS. Which Azure storage service is best suited for this requirement?

Accepted Answer

Azure Blob Storage

Answer

Azure Disk Storage

Answer

Azure Files

Answer

Azure Table Storage

Question 47

A company wants to implement a solution that uses Artificial Intelligence to identify specific objects within a collection of uploaded images. Which Azure service should they use for this task?

Accepted Answer

Computer Vision

Answer

Azure Machine Learning

Answer

Azure Bot Service

Answer

Azure IoT Hub

Question 48

An administrator needs to deploy several virtual machines and ensure that if a hardware failure occurs within a single rack in an Azure datacenter, only a subset of the virtual machines are affected. Which Azure feature helps distribute VMs across physical hardware to minimize this risk?

Accepted Answer

Availability Sets

Answer

Resource Groups

Answer

Availability Zones

Answer

Management Groups

Question 49

An organization wants to restrict traffic to and from its Azure Virtual Machines based on source and destination IP addresses, ports, and protocols. Which Azure resource should be implemented to provide this security layer?

Accepted Answer

Network Security Group (NSG)

Answer

Azure ExpressRoute

Answer

Resource Locks

Answer

Azure Policy

Question 50

A developer wants to implement a serverless code architecture where functions only run in response to specific events, such as a new message arriving in a queue. Which Azure service should be used?

Accepted Answer

Azure Functions

Answer

Azure Container Instances

Answer

Azure Virtual Machines

Answer

Azure App Service

Question 51

An administrator needs to prevent any resources from being accidentally deleted within a specific Azure Resource Group, regardless of the user's permissions. What should the administrator implement?

Accepted Answer

A Delete Resource Lock

Answer

Role-Based Access Control (RBAC)

Answer

A Read-Only Resource Lock

Answer

An Azure Policy

Question 52

An enterprise is required by law to store its data in a specific geographic location. Which Azure feature allows the company to ensure that its data and resources are restricted to specific regions to meet these compliance requirements?

Accepted Answer

Azure Policy

Answer

Network Security Groups

Answer

Resource Groups

Answer

Azure Monitor

Question 53

An organization plans to deploy a mission-critical application across two Azure Availability Zones. They require a Service Level Agreement (SLA) for virtual machine connectivity. According to the standard Azure SLA for Virtual Machines, what is the guaranteed connectivity uptime if two or more instances are deployed across two or more Availability Zones in the same region?

Accepted Answer

99.99%

Answer

99.95%

Answer

100%

Answer

99.9%

Question 54

A company is using an Azure Storage Account configured with Geo-redundant storage (GRS). Which of the following statements accurately describes the data access and recovery capabilities during a secondary region outage where the primary region remains healthy?

Accepted Answer

The data remains available in the primary region with LRS durability, but replicas cannot be created in the secondary region until service is restored.

Answer

The data becomes read-only in the primary region until the secondary region is back online.

Answer

The storage account automatically fails over to a third 'buffer' region to maintain the GRS SLA.

Answer

Management can immediately trigger a manual failover to the secondary region to ensure data redundancy is maintained.

Question 55

An enterprise wants to enforce a policy where all resources must include a 'Department' tag. If a user attempts to create a Virtual Network (VNet) without this tag, the deployment should be blocked. Which Azure Governance component and 'effect' should be utilized to meet this requirement?

Accepted Answer

Azure Policy with a 'Deny' effect

Answer

Azure Blueprints with a 'ReadOnly' lock

Answer

Azure Policy with an 'Audit' effect

Answer

Role-Based Access Control (RBAC) with a 'Custom Role'

Question 56

A financial company needs to connect their on-premises data center to an Azure Virtual Network. They require a private, dedicated connection that does not traverse the public internet and must provide consistent bandwidth. Which Azure service should they implement, and what is the specific pricing component associated with data transfer for this service?

Accepted Answer

Azure ExpressRoute; pricing includes a Port speed fee and an Egress data transfer fee (for the Metered plan).

Answer

Azure Front Door; pricing includes an Ingress data transfer fee but no Port fee.

Answer

Azure Virtual WAN; pricing is calculated based on the number of Virtual Machines in the vNet.

Answer

Azure VPN Gateway; pricing is based solely on a flat monthly fee regardless of data volume.

Question 57

A developer is configuring a web application across three Virtual Machines (VMs). They decide to use a single 'Standard' tier Azure Load Balancer to distribute traffic. If all three VMs are running in a single Availability Zone without an Availability Set, what is the 'Service Level Agreement' (SLA) for the connectivity of this specific VM deployment?

Accepted Answer

95%

Answer

99.99%

Answer

99.95%

Answer

99.9%

Question 58

An administrator needs to restrict a junior developer's access so they can only manage virtual machines within a specific resource group, without granting permissions to modify the network settings or delete the resource group itself. Which approach follows the principle of least privilege using Azure Identity and Access Management (IAM)?

Accepted Answer

Assign the 'Virtual Machine Contributor' role to the developer at the Resource Group scope.

Answer

Add the developer to the 'Azure AD Global Administrator' group to ensure they have enough permissions.

Answer

Assign the 'Owner' role to the developer at the Resource Group scope.

Answer

Assign the 'Contributor' role to the developer at the Subscription scope.

Question 59

A company is planning an Azure migration and needs to estimate costs for an application requiring 10 TB of monthly outbound data transfer (egress) to the internet. If the application is hosted in 'West US' and the data is being sent to a client in Germany, how does Azure primarily calculate the pricing for this data transfer?

Accepted Answer

The first 5 GB are free, and the remaining volume is charged based on the total gigabytes of data leaving the Azure source region.

Answer

Data transfer is billed based on the destination region's local internet service provider rates.

Answer

Data transfer is free as long as the source and destination are within the same Azure Active Directory (Microsoft Entra) tenant.

Answer

Both ingress and egress data transfers are charged at a flat rate of

$0.05

per GB.

Question 60

An organization utilizes a 'Premium LRS' (Locally Redundant Storage) managed disk for a mission-critical database VM. To save costs during a weekend maintenance window, they shut down the VM from within the Guest Operating System. Which statement accurately describes the billing for the VM and its storage during this period?

Accepted Answer

The VM continues to accrue compute charges because it is not in the 'Deallocated' state, and the full capacity of the Premium LRS disk is billed.

Answer

The VM is billed at a reduced 'Hibernation' rate, and storage costs are waived since the disk is not performing I/O.

Answer

Compute charges stop immediately, but the storage is billed only for the actual data stored (used space) on the disk.

Answer

Both compute and storage charges are automatically suspended because the OS sent a shutdown signal.

Question 61

A company is designing a high-availability architecture for a web application. They plan to use Azure Virtual Machine Scale Sets (VMSS) with 'Flexible' orchestration. They require that if a physical hardware failure occurs on a single rack within an Azure datacenter, the application remains available. Which Azure feature should be configured within the Scale Set to ensure VMs are distributed across distinct hardware racks?

Accepted Answer

Fault Domains

Answer

Update Domains

Answer

Resource Groups

Answer

Availability Zones

Question 62

An enterprise is using a 'Standard' tier Virtual Network Gateway for a site-to-site VPN. They need to calculate their monthly expenditure. Which two factors are the primary drivers of cost for this Azure Networking resource?

Accepted Answer

The hourly price for the Gateway SKU and the amount of outbound (egress) data transfer.

Answer

The total amount of inbound (ingress) data transfer and the number of Network Security Group rules.

Answer

The number of subnets within the Virtual Network and the number of connected local users.

Answer

The hourly price for the Gateway SKU and a fee for every Gigabyte of data entering the Azure region.

Related quizzes

Related quizzes