111)

112)

113)
114)

Which Azure service should you use to collect events from multiple
resources into a centralized repository?

A. Azure Event Hubs

B. Azure Analysis Services

C. Azure Monitor

D. Azure Stream Analytics

115)

116)

117)
118)

119)

You need to ensure that the services running on the virtual machines are
available if a single data center fails.
Solution: You deploy the virtual machines to two or more scale sets.
Does this meet the goal?

A. Yes

B. No

Scale set permettent d'automatiser le déploiement et la gestion d'un grand nombre de machines
virtuelles, mais ils ne garantissent pas la disponibilité en cas de panne d'un data center entier.

120)

You need to be notified when Microsoft plans to perform maintenance that

can affect the resources deployed to an Azure subscription.
What should you use?

A. Azure Monitor

B. Azure Service Health

C. Azure Advisor

D. Microsoft Trust Center

121)
122)

123)

124)

125)
126)

127)

You plan to deploy several Azure virtual machines.

You need to ensure that the services running on the virtual machines remain
available if a single data center fails.
What are two possible solutions? Each correct answer presents a complete
solution.

A. Deploy the virtual machines to two or more availability zones.

B. Deploy the virtual machines to two or more resource groups.

C. Deploy the virtual machines to a scale set.

D. Deploy the virtual machines to two or more regions.

128)
129)

130)

131)

What is the most severe failure from which an Azure Availability Zone can
be used to protect access to Azure service?

A. a physical server failure

B. an Azure region failure

C. a storage failure

D. an Azure data center failure

132)

You need to purchase a third-party virtual security appliance that you will
deploy to an Azure subscription.
What should you use?

A. Azure subscriptions

B. Azure Security Center

C. Azure Marketplace

D. Microsoft Store

133)
134)

136)

139)

140)

You plan to deploy a service to Azure virtual machines.

You need to ensure that the service will be available if a datacenter fails.
What should you use as part of the virtual machine deployment?
 A. availability sets

B. proximity placement groups

C. host groups

D. availability zone

141)

Your company has an Azure subscription that contains resources in several

regions.
You need to ensure that administrators can only create resources in those
regions.
What should you use?

A. a read-only lock

B. an Azure policy

C. a management group

D. a reservation

142)

143)

144)

What is the function of a Site-to-Site VPN?

 A. provides a secure connection between a computer on a public network and the corporate
network

B. provides a dedicated private connection to Azure that does NOT travel over the internet

C. provides a connection from an on-premises VPN device to an Azure VPN gateway

146)

148)

150)
One of the benefits of Azure SQL Data Warehouse is that high availability is
built into the platform.
Instructions: Review the underlined text. If it makes the statement correct,
select `No change is needed`. If the statement is incorrect, select the answer
choice that makes the statement correct.

A. No change is needed

B. automatic scaling

C. data compression

D. versioning

151)

You plan to deploy several Azure virtual machines.

You need to ensure that the services running on the virtual machines are
available if a single data center fails.
Solution: You deploy the virtual machines to two or more regions.
Does this meet the goal?

A. Yes
 B. No

153)

At which OSI layer does ExpressRoute operate?

A. Layer 2

B. Layer 3

C. Layer 5

D. Layer 7

154)

155)

156)

You plan to store 20 TB of data in Azure. The data will be accessed

infrequently and visualized by using Microsoft Power BI.
You need to recommend a storage solution for the data.
Which two solutions should you recommend? Each correct answer presents a
complete solution.
NOTE: Each correct selection is worth one point.

A. Azure Data Lake

B. Azure Cosmos DB
 C. Azure SQL Data Warehouse

D. Azure SQL Database

E. Azure Database for PostgreSQL

157)

158)

160)
An Azure administrator plans to run a PowerShell script that creates Azure
resources.
You need to recommend which computer configuration to use to run the
script.
Solution: Run the script from a computer that runs Linux and has the Azure
CLI tools installed.
Does this meet the goal?

A. Yes

B. No

161)

An Azure administrator plans to run a PowerShell script that creates Azure

resources.
You need to recommend which computer configuration to use to run the
script.
Solution: Run the script from a computer that runs Chrome OS and uses
Azure Cloud Shell.
Does this meet the goal?

A. Yes

B. No

162)

163).
An Azure administrator plans to run a PowerShell script that creates Azure
resources.
You need to recommend which computer configuration to use to run the
script.
Solution: Run the script from a computer that runs macOS and has
PowerShell Core 6.0 installed.
Does this meet the goal?

A. Yes

B. No

164) ???

165)
166)

167)

168)

You have an Azure environment. You need to create a new Azure virtual
machine from a tablet that runs the Android operating system.
Solution: You use Bash in Azure Cloud Shell.
Does this meet the goal?

A. Yes

B. No

169)

You have an on-premises application that sends email notifications

automatically based on a rule.
You plan to migrate the application to Azure.
You need to recommend a serverless computing solution for the application.
What should you include in the recommendation?

A. a web app

B. a server image in Azure Marketplace

C. a logic app

D. an API app
170)

You plan to deploy a website to Azure. The website will be accessed by

users worldwide and will host large video files.
You need to recommend which Azure feature must be used to provide the
best video playback experience.
What should you recommend?

A. an application gateway

B. an Azure ExpressRoute circuit

C. a content delivery network (CDN)

D. an Azure Traffic Manager profile

171)

Your company plans to deploy several million sensors that will upload data
to Azure.
You need to identify which Azure resources must be created to support the
planned solution.
Which two Azure resources should you identify? Each correct answer
presents part of the solution.
NOTE: Each correct selection is worth one point.

A. Azure Data Lake

B. Azure Queue storage

C. Azure File Storage

D. Azure IoT Hub

E. Azure Notification Hubs

172)
174)

175)

What can you use to automatically send an alert if an administrator stops an

Azure virtual machine?

A. Azure Advisor

B. Azure Service Health

C. Azure Monitor

D. Azure Network Watcher

177)

You have an Azure environment.

You need to create a new Azure virtual machine from a tablet that runs the
Android operating system.
What are three possible solutions? Each correct answer presents a complete
solution.
NOTE: Each correct selection is worth one point.

A. Use Bash in Azure Cloud Shell.

B. Use PowerShell in Azure Cloud Shell.

C. Use the PowerApps portal.

D. Use the Security & Compliance admin center.

E. Use the Azure portal.

178)

A team of developers at your company plans to deploy, and then remove,

50 virtual machines each week. All the virtual machines are configured by
using Azure
Resource Manager templates.
You need to recommend which Azure service will minimize the administrative
effort required to deploy and remove the virtual machines.
What should you recommend?

A. Azure Reserved Virtual Machine (VM) Instances

B. Azure DevTest Labs

C. Azure virtual machine scale sets

D. Azure Virtual Desktop

179)
 180)

You have an Azure subscription named Subscription1. You sign in to the

Azure portal and create a resource group named RG1.
From Azure documentation, you have the following command that creates a
virtual machine named VM1. az vm create --resource-group RG1 --name
VM1 --image UbuntuLTS --generate-ssh-keys
You need to create VM1 in Subscription1 by using the command.
Solution: From the Azure portal, launch Azure Cloud Shell and select
PowerShell. Run the command in Cloud Shell.
Does this meet the goal?

A. Yes

B. No

181)
You have an Azure subscription named Subscription1. You sign in to the
Azure portal and create a resource group named RG1.
From Azure documentation, you have the following command that creates a
virtual machine named VM1. az vm create --resource-group RG1 --name
VM1 --image UbuntuLTS
--generate-ssh-keys
You need to create VM1 in Subscription1 by using the command.
Solution: From a computer that runs Windows 10, install Azure CLI. From
PowerShell, sign in to Azure and then run the command.
Does this meet the goal?

A. Yes

B. No

182)

You have an Azure subscription named Subscription1. You sign in to the

Azure portal and create a resource group named RG1.
From Azure documentation, you have the following command that creates a
virtual machine named VM1. az vm create --resource-group RG1 --name
VM1 --image UbuntuLTS
--generate-ssh-keys
You need to create VM1 in Subscription1 by using the command.
Solution: From a computer that runs Windows 10, install Azure CLI. From a
command prompt, sign in to Azure and then run the command.
Does this meet the goal?

A. Yes

B. No

183)

184)
185)

186)

187)

An Azure administrator plans to run a PowerShell script that creates Azure

resources.
You need to recommend which computer configuration to use to run the
script.
Solution: Run the script from a computer that runs Windows 10 and has the
Azure PowerShell module installed.
Does this meet the goal?

A. Yes

B. No

188)
189)

Which service provides serverless computing in Azure?

A. Azure Virtual Machines

B. Azure Functions

C. Azure storage account

D. Azure dedicated hosts

190)

An Azure administrator plans to run a PowerShell script that creates Azure

resources.
You need to recommend which computer configuration to use to run the
script.
Which three computers can run the script? Each correct answer presents a
complete solution.
NOTE: Each correct selection is worth one point.

A. a computer that runs macOS and has PowerShell Core 6.0 installed.

B. a computer that runs Windows 10 and has the Azure PowerShell module installed.

C. a computer that runs Linux and has the Azure PowerShell module installed.

D. a computer that runs Linux and has the Azure CLI tools installed.

E. a computer that runs Chrome OS and uses Azure Cloud Shell.

191)

You have an Azure subscription named Subscription1. You sign in to the

Azure portal and create a resource group named RG1.
From Azure documentation, you have the following command that creates a
virtual machine named VM1. az vm create --resource-group RG1 --name
VM1 --image UbuntuLTS --generate-ssh-keys
You need to create VM1 in Subscription1 by using the command.
Solution: From the Azure portal, launch Azure Cloud Shell and select Bash.
Run the command in Cloud Shell.
Does this meet the goal?

A. Yes

B. No

192)

Your company has several business units.

Each business unit requires 20 different Azure resources for daily operation.
All the business units require the same type of Azure resources.
You need to recommend a solution to automate the creation of the Azure
resources.
What should you include in the recommendations?

A. Azure Resource Manager templates

B. virtual machine scale sets

C. the Azure API Management service

D. management groups

193)

194)

What can you use to identify underutilized or unused Azure virtual machines?

A. Azure Advisor

B. Azure Cost Management + Billing

 C. Azure reservations

D. Azure Policy

196)

197)

198)

199)

A team of developers at your company plans to deploy, and then remove,

50 customized virtual machines each week. Thirty of the virtual machines run
Windows
Server 2016 and 20 of the virtual machines run Ubuntu Linux.
You need to recommend which Azure service will minimize the administrative
effort required to deploy and remove the virtual machines.
What should you recommend?

A. Azure Reserved Virtual Machines (VM) Instances

B. Azure virtual machine scale sets

C. Azure DevTest Labs

D. Microsoft Managed Desktop

200)

201)

A support engineer plans to perform several Azure management tasks by

using the Azure CLI.
You install the CLI on a computer.
You need to tell the support engineer which tools to use to run the CLI.
Which two tools should you instruct the support engineer to use? Each
correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.

A. Command Prompt

B. Azure Resource Explorer

C. Windows PowerShell

D. Windows Defender Firewall

E. Network and Sharing Center

202)

ou have an Azure environment. You need to create a new Azure virtual

machine from a tablet that runs the Android operating system.
Solution: You use PowerShell in Azure Cloud Shell.
Does this meet the goal?

A. Yes

B. No

203)

You have an Azure environment. You need to create a new Azure virtual
machine from a tablet that runs the Android operating system.
Solution: You use the PowerApps portal.
Does this meet the goal?

A. Yes

B. No

204)

You have an Azure environment. You need to create a new Azure virtual
machine from a tablet that runs the Android operating system.
Solution: You use the Azure portal.
Does this meet the goal?

A. Yes

B. No

205)

206)

207)
209)

212)211 ?

You have a virtual machine named VM1 that runs Windows Server 2016.
VM1 is in the East US Azure region.
Which Azure service should you use from the Azure portal to view service
failure notifications that can affect the availability of VM1?

A. Azure Service Fabric

B. Azure Monitor

C. Azure virtual machines

D. Azure Advisor

213)

Your Azure environment contains multiple Azure virtual machines.

You need to ensure that a virtual machine named VM1 is accessible from
the Internet over HTTP.
Solution: You modify an Azure Traffic Manager profile.
Does this meet the goal?

A. Yes

B. No
214)

Your company plans to deploy several web servers and several database
servers to Azure.
You need to recommend an Azure solution to limit the types of connections
from the web servers to the database servers.
What should you include in the recommendation?

A. network security groups (NSGs)

B. Azure Service Bus

C. a local network gateway

D. a route filter

215)

216)

Which service provides network traffic filtering across multiple Azure

subscriptions and virtual networks?

A. Azure Firewall

B. an application security group

C. Azure DDoS protection

D. a network security group (NSG)

217)

Which Azure service should you use to store certificates?

A. Azure Security Center

B. an Azure Storage account

C. Azure Key Vault

D. Azure Information Protection

218)

Which Azure service can you use as a security information and event
management (SIEM) solution?

A. Azure Analysis Services

B. Azure Sentinel

C. Azure Information Protection

D. Azure Cognitive Services

219)

220)
Box 1: Azure Sentinel -

Box 2: Azure Security Center -

Box 3: Azure Key Vault –

221)

222)

223)
224)

You have an Azure virtual machine named VM1.

You plan to encrypt VM1 by using Azure Disk Encryption.
Which Azure resource must you create first?

A. an Azure Storage account

B. an Azure Key Vault

C. an Azure Information Protection policy

D. an Encryption key

225)

Which resources can be used as a source for a Network security group

inbound security rule?

A. Service Tags only

B. IP Addresses, Service tags and Application security groups

C. Application security groups only

D. IP Addresses only

226)

227)
228)

229)

You have an Azure Sentinel workspace.

You need to automate responses to threats detected by Azure Sentinel.
What should you use?

• A. adaptive network hardening in Azure Security Center

• B. Azure Service Health
• C. Azure Monitor workbooks Most Voted
• D. adaptive application controls in Azure Security Center

231)

232)
233)

You have an Azure subscription.

You need to review your secure score.
What should you use?

• A. Azure Monitor
• B. Azure Advisor
• C. Help + support
• D. Microsoft Defender for Cloud

234)

235)

236)

You need to collect and automatically analyze security events from Azure Active
Directory (Azure AD).
What should you use?

• A. Microsoft Sentinel Most Voted

• B. Azure Synapse Analytics
 • C. Azure AD Connect
• D. Azure Key Vault

237)

238)

239)

240)

Your company plans to automate the deployment of servers to Azure.

Your manager is concerned that you may expose administrative credentials during
the deployment.
You need to recommend an Azure solution that encrypts the administrative
credentials during the deployment.
What should you include in the recommendation?

• A. Azure Key Vault Most Voted

• B. Azure Information Protection
• C. Microsoft Defender for Cloud
• D. Azure Multi-Factor Authentication (MFA)

241)
244)

You need to configure an Azure solution that meets the following requirements:
✑ Secures websites from attacks
✑ Generates reports that contain details of attempted attacks
What should you include in the solution?

• A. Azure Firewall
• B. a network security group (NSG)
• C. Azure Information Protection
• D. DDoS protection Most Voted

245)

246)

Your Azure environment contains multiple Azure virtual machines.

You need to ensure that a virtual machine named VM1 is accessible from the Internet
over HTTP.
What are two possible solutions? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
 • A. Modify an Azure Traffic Manager profile
• B. Modify a network security group (NSG)
• C. Modify a DDoS protection plan
• D. Modify an Azure firewall

247)

248)

249)

You have an Azure environment that contains 10 virtual networks and 100 virtual
machines.
You need to limit the amount of inbound traffic to all the Azure virtual networks.
What should you create?

• A. one application security group (ASG)

• B. 10 virtual network gateways
• C. 10 Azure ExpressRoute circuits
• D. one Azure firewall Most Voted

250)

This question requires that you evaluate the underlined text to determine if it is
correct.
Azure Key Vault is used to store secrets for Azure Active Directory (Azure AD) user
accounts.
Instructions: Review the underlined text. If it makes the statement correct, select `No
change is needed`. If the statement is incorrect, select the answer choice that makes
the statement correct.
 • A. No change is needed
• B. Azure Active Directory (Azure AD) administrative accounts
• C. Personally Identifiable Information (PII)
• D. server applications Most Voted

251)

Your company plans to automate the deployment of servers to Azure.

Your manager is concerned that you may expose administrative credentials during
the deployment.
You need to recommend an Azure solution that encrypts the administrative
credentials during the deployment.
What should you include in the recommendation?

• A. Azure Key Vault Most Voted

• B. Azure Information Protection
• C. Azure Security Center
• D. Azure Multi-Factor Authentication (MFA)

252)

253)

Your Azure environment contains multiple Azure virtual machines.

You need to ensure that a virtual machine named VM1 is accessible from the Internet
over HTTP.
Solution: You modify a DDoS protection plan.
Does this meet the goal?

• A. Yes
• B. No Most Voted

254)

You need to collect and automatically analyze security events from Azure Active
Directory (Azure AD).
What should you use?

• A. Azure Sentinel Most Voted

• B. Azure Synapse Analytics
 • C. Azure AD Connect
• D. Azure Key Vault

255)

Your Azure environment contains multiple Azure virtual machines.

You need to ensure that a virtual machine named VM1 is accessible from the Internet
over HTTP.
Solution: You modify an Azure firewall.
Does this meet the goal?

• A. Yes
• B. No Most Voted

256)

This question requires that you evaluate the underlined text to determine if it is
correct.
Azure Germany can be used by legal residents of Germany only.
Instructions: Review the underlined text. If it makes the statement correct, select `No
change is needed`. If the statement is incorrect, select the answer choice that makes
the statement correct.

• A. no change is needed
• B. only enterprises that are registered in Germany
• C. only enterprises that purchase their azure licenses from a partner based in
Germany
• D. any user or enterprise that requires its data to reside in Germany Most Voted

257)

258)
259)

What should you use to evaluate whether your company's Azure environment meets
regulatory requirements?

• A. Azure Service Health

• B. Azure Knowledge Center
• C. Azure Security Center Most Voted
• D. Azure Advisor

260)

261)

262)
Which two types of customers are eligible to use Azure Government to develop a
cloud solution? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.

• A. a Canadian government contractor

• B. a European government contractor
• C. a United States government entity Most Voted
• D. a United States government contractor Most Voted
• E. a European government entity

263)

264)

You need to ensure that when Azure Active Directory (Azure AD) users connect to
Azure AD from the Internet by using an anonymous IP address, the users are
prompted automatically to change their password.
Which Azure service should you use?

• A. Azure AD Connect Health

• B. Azure AD Privileged Identity Management
• C. Azure Advanced Threat Protection (ATP)
• D. Azure AD Identity Protection Most Voted

265)

266)

To what should an application connect to retrieve security tokens?

 • A. an Azure Storage account
• B. Azure Active Directory (Azure AD)
• C. a certificate store
• D. an Azure key vault

267)

Your network contains an Active Directory forest. The forest contains 5,000 user
accounts.
Your company plans to migrate all network resources to Azure and to decommission
the on-premises data center.
You need to recommend a solution to minimize the impact on users after the planned
migration.
What should you recommend?

• A. Implement Azure Multi-Factor Authentication (MFA)

• B. Sync all the Active Directory user accounts to Azure Active Directory (Azure
AD) Most Voted
• C. Instruct all users to change their password
• D. Create a guest user account in Azure Active Directory (Azure AD) for each
user

268)

269)

You create a resource group named RG1 in Azure Resource Manager.

You need to prevent the accidental deletion of the resources in RG1.
Which setting should you use? To answer, select the appropriate setting in the
answer area.
Hot Area:
 270)

You have a resource group named RG1.

You need to prevent the creation of virtual machines in RG1. The solution must
ensure that other objects can be created in RG1.
What should you use?

• A. a lock
• B. an Azure role
• C. a tag
• D. an Azure policy Most Voted

271)

You have an Azure subscription and 100 Windows 10 devices.

You need to ensure that only users whose devices have the latest security patches
installed can access Azure Active Directory (Azure AD)-integrated applications.
What should you implement?
 • A. a conditional access policy Most Voted
• B. Azure Bastion
• C. Azure Firewall
• D. Azure Policy

272)

What can Azure Information Protection encrypt?

• A. network traffic
• B. documents and email messages Most Voted
• C. an Azure Storage account
• D. an Azure SQL database

273)

What should you use to evaluate whether your company's Azure environment meets
regulatory requirements?

• A. the Knowledge Center website

• B. the Advisor blade from the Azure portal
• C. Compliance Manager from the Service Trust Portal
• D. the Solutions blade from the Azure portal

274)

275)

You have an Azure subscription.

Where will you find details on the personal data collected by Microsoft, how Microsoft
uses the data, and what the data is used for?

• A. the Data Protection Addendum

• B. the Microsoft Online Services Terms
• C. the Microsoft Privacy Statement Most Voted
• D. Azure Security Center
276)

277)

278)

279)

280)
281)

282)

283)

What should you use to evaluate whether your company's Azure environment meets
regulatory requirements?

• A. Azure Service Health

• B. Azure Knowledge Center
• C. Microsoft Defender for Cloud Most Voted
• D. Azure Advisor

284)
285)

286)

Your company has an Azure subscription that contains resources in several regions.
You need to create the Azure resource that must be used to meet the policy
requirement.
What should you create?

• A. a read-only lock
• B. an Azure policy Most Voted
• C. a management group
• D. a reservation

287)

This question requires that you evaluate the underlined text to determine if it is
correct.
From Azure Cloud Shell, you can track your company's regulatory standards and
regulations, such as ISO 27001.
Instructions: Review the underlined text. If it makes the statement correct, select `No
change is needed.` If the statement is incorrect, select the answer choice that makes
the statement correct.

• A. No change is needed.
• B. the Microsoft Cloud Partner Portal
• C. Compliance Manager Most Voted
• D. the Trust Center

288)
289)

290)

292)

293)
294)

295)

296)
297)

Your company plans to migrate all on-premises data to Azure.

You need to identify whether Azure complies with the company's regional
requirements.
What should you use?

• A. the Knowledge Center

• B. Azure Marketplace
• C. the MyApps portal
• D. the Trust Center Most Vote

298)

299)

300)
301)

302)

What is guaranteed in an Azure Service Level Agreement (SLA) for virtual machines?

• A. uptime Most Voted

• B. feature availability
• C. bandwidth
• D. performance

303)

304)

Your company plans to purchase an Azure subscription.

The company's support policy states that the Azure environment must provide an
option to access support engineers by phone or email.
You need to recommend which support plan meets the support policy requirement.
Solution: Recommend a Basic support plan.
Does this meet the goal?

• A. Yes
 • B. No Most Voted

305)

Your company plans to purchase an Azure subscription.

The company's support policy states that the Azure environment must provide an
option to access support engineers by phone or email.
You need to recommend which support plan meets the support policy requirement.
Solution: Recommend a Standard support plan.
Does this meet the goal?

• A. Yes Most Voted

• B. No

306)

Your company plans to purchase an Azure subscription.

The company's support policy states that the Azure environment must provide an
option to access support engineers by phone or email.
You need to recommend which support plan meets the support policy requirement.
Solution: Recommend a Premier support plan.
Does this meet the goal?

• A. Yes
• B. No

307)

Your company plans to request an architectural review of an Azure environment from

Microsoft.
The company currently has a Basic support plan.
You need to recommend a new support plan for the company. The solution must
minimize costs.
Which support plan should you recommend?

• A. Premier
• B. Developer
• C. Professional Direct
 • D. Standard

308)

309)

What is required to use Azure Cost Management?

• A. a Dev/Test subscription
• B. Software Assurance
• C. an Enterprise Agreement (EA)
• D. a pay-as-you-go subscription Most Voted

310)
311)

Your company plans to purchase an Azure subscription.

The company's support policy states that the Azure environment must provide an
option to access support engineers by phone or email.
You need to recommend which support plan meets the support policy requirement.
Solution: Recommend a Professional Direct support plan.
Does this meet the goal?

• A. Yes Most Voted

• B. No

312)

Your company has a Software Assurance agreement that includes Microsoft SQL
Server licenses.
You plan to deploy SQL Server on Azure virtual machines.
What should you do to minimize licensing costs for the deployment?

• A. Deallocate the virtual machines during off hours.

• B. Use Azure Hybrid Benefit. Most Voted
• C. Configure Azure Cost Management budgets.
• D. Use Azure reservations.

313)

Your company has 10 departments.

The company plans to implement an Azure environment.
You need to ensure that each department can use a different payment option for the
Azure services it consumes.
What should you create for each department?

• A. a reservation
• B. a subscription Most Voted
• C. a resource group
• D. a container instance

314)

315)
316)

317)
318)

319)

320)

Which statement accurately describes the Modern Lifecycle Policy for Azure
services?

• A. Microsoft provides mainstream support for a service for five years.

• B. Microsoft provides a minimum of 12 months' notice before ending support
for a service. Most Voted
• C. After a service is made generally available, Microsoft provides support for
the service for a minimum of four years.
• D. When a service is retired, you can purchase extended support for the
service for up to five years.
321) help+support is the response

322)
323)

324)

325)

Your company has an Azure subscription that contains the following unused
resources:
✑ 20 user accounts in Azure Active Directory (Azure AD)
✑ Five groups in Azure AD
✑ 10 public IP addresses
✑ 10 network interfaces
You need to reduce the Azure costs for the company.
Which unused resources should you remove?

• A. the network interfaces

• B. the public IP addresses Most Voted
• C. the groups
• D. the user accounts

326)
327)

328)

329)

330)

Who can use the Azure Total Cost of Ownership (TCO) calculator?

• A. billing readers for an Azure subscription only

• B. owners for an Azure subscription only
• C. anyone Most Voted
• D. all users who have an account in Azure Active Directory (Azure AD) that is
linked to an Azure subscription only
331)

332)

Which task can you perform by using Azure Advisor?

• A. Integrate Active Directory and Azure Active Directory (Azure AD).

• B. Estimate the costs of an Azure solution.
• C. Confirm that Azure subscription security follows best practices. Most Voted
• D. Evaluate which on-premises resources can be migrated to Azure.

333)

334)
335)

336) select stop for the VM

337)

338)

339)

340)
341)

342)

343)

344)

What is the longest term you can purchase for Azure Reserved VM instances?

• A. one year
• B. five years
• C. four years
• D. three years Most Voted
345)

A company uses Microsoft 365.

You need to identify the portal that users should use to install Office applications.

What should you identify?

• A. Microsoft 365 admin center

• B. Microsoft Volume Licensing Service Center
• C. Azure portal
• D. Microsoft 365 user portal Most Vot

346)

Your company has 10 offices. You plan to generate several billing reports from the
Azure portal. Each report will contain the Azure resource utilization of each office.
Which Azure Resource Manager feature should you use before you generate the
reports?

• A. tags Most Voted

• B. templates
• C. locks
• D. policies

347)

348)

This question requires that you evaluate the underlined text to determine if it is
correct.
If Microsoft plans to end support for an Azure service that does NOT have a
successor service, Microsoft will provide notification at least 12 months before.
Instructions: Review the underlined text. If it makes the statement correct, select `No
change is needed`. If the statement is incorrect, select the answer choice that makes
the statement correct.

• A. No change is needed. Most Voted

• B. 6 months
• C. 90 days
• D. 30 days
349)

350)

351)

Your company has an Azure subscription that contains the following unused
resources:
✑ 20 user accounts in Azure Active Directory (Azure AD)
✑ Five groups in Azure AD
✑ 10 public IP addresses
✑ 10 network interfaces
You need to reduce the Azure costs for the company.
Solution: You remove the unused network interfaces.
Does this meet the goal?

• A. Yes
• B. No Most Voted

352)

Your company has an Azure subscription that contains the following unused
resources:
✑ 20 user accounts in Azure Active Directory (Azure AD)

Five groups in Azure AD -

✑ 10 public IP addresses
✑ 10 network interfaces
You need to reduce the Azure costs for the company.
Solution: You remove the unused public IP addresses.
Does this meet the goal?

• A. Yes Most Voted

• B. No

353)

Your company has an Azure subscription that contains the following unused
resources:
✑ 20 user accounts in Azure Active Directory (Azure AD)
✑ Five groups in Azure AD
✑ 10 public IP addresses
✑ 10 network interfaces
You need to reduce the Azure costs for the company.
Solution: You remove the unused user accounts.
Does this meet the goal?

• A. Yes
• B. No Most Vote

354)

355)

356)

This question requires that you evaluate the underlined text to determine if it is
correct.
A support plan solution that gives you best practice information, health status and
notifications, and 24/7 access to billing information at the lowest possible cost is a
Standard support plan.
Instructions: Review the underlined text. If it makes the statement correct, select `No
change is needed`. If the statement is incorrect, select the answer choice that makes
the statement correct.

• A. No change is needed
• B. Developer
• C. Basic Most Voted
• D. Premier

357)

In which Azure support plans can you open a new support request?

• A. Premier and Professional Direct only

• B. Premier, Professional Direct, and Standard only
• C. Premier, Professional Direct, Standard, and Developer only
• D. Premier, Professional Direct, Standard, Developer, and Basic Most Voted

358)

This question requires that you evaluate the underlined text to determine if it is
correct.
You can create an Azure support request from support.microsoft.com.
Instructions: Review the underlined text. If it makes the statement correct, select `No
change is needed.` If the statement is incorrect, select the answer choice that makes
the statement correct.

• A. No change is needed.
• B. the Azure portal Most Voted
• C. the Knowledge Center
• D. the Security & Compliance admin center

359)

Your company has an Azure subscription that contains the following unused
resources:
✑ 20 user accounts in Azure Active Directory (Azure AD)
✑ Five groups in Azure AD
✑ 10 public IP addresses
✑ 10 network interfaces
You need to reduce the Azure costs for the company.
Solution: You remove the unused groups.
Does this meet the goal?
 • A. Yes
• B. No Most Voted

360)

The Azure Standard support plan is the lowest cost option to receive 24x7 access to
support engineers by phone.
Instructions: Review the underlined text. If it makes the statement correct, select `No
change is needed`. If the statement is incorrect, select the answer choice that makes
the statement correct.

• A. No change is needed Most Voted

• B. Developer
• C. Basic
• D. Professional Direct

361)

362)

You need to compare a company's cloud usage to industry standard best practices.
What should you use?

• A. Azure Monitor
• B. Azure Service Health
• C. Application Insights in Azure Monitor
• D. Azure Advisor Most Voted

363)

You need to start Azure Cloud Shell.

What should you use?

• A. the Azure portal Most Voted

 • B. Azure Command-Line Interface (CLI)
• C. Azure PowerShell
• D. an Azure Resource Manager (ARM) template

364)

How many copies of data are maintained by an Azure Storage account that uses
locally-redundant storage (LRS)?

• A. 3 Most Voted
• B. 4
• C. 6
• D. 9

365)

What enables a cloud service to adapt quickly to changing requirements?

• A. high availability
• B. predictability
• C. manageability
• D. agility Most Voted

366)

What is an example of vertical scaling in a cloud environment?

• A. adding an additional CPU to an existing Azure virtual machine Most Voted

• B. adding an additional Azure virtual machine
• C. adding an additional Azure Virtual Desktop session host
• D. adding an additional Azure App Service instance automatically

367)
368)

369)

What additional resource is required by an Azure virtual machine?

• A. a virtual network Most Voted

• B. a service endpoint
• C. Azure Firewall
• D. a public IP address

370)

371)

How many copies of data are maintained by an Azure Storage account that uses
geo-redundant storage (GRS)?

• A. 3
• B. 4
• C. 6 Most Voted
 • D. 9

372)

What is used to grant permission to Azure Virtual Desktop resources?

• A. tags
• B. role-based access control (RBAC) roles Most Voted
• C. resource groups
• D. application security groups

373)

374)

375)

376)
377)

Which cloud service model minimizes the management responsibility of a customer?

• A. infrastructure as a service (IaaS)

• B. platform as a service (PaaS)
• C. software as a service (SaaS) Most Voted

378) public cloud

379)

380)

381)
382)

383)

384)

385)

You have an Azure web app.

You need to manage the settings of the web app from an iPhone.

What are two Azure management tools that you can use? Each correct answer
presents a complete solution.

NOTE: Each correct selection is worth one point.

 • A. Windows PowerShell
• B. Azure Cloud Shell Most Voted
• C. the Azure portal Most Voted
• D. Azure Storage Explorer

386)

HOTSPOT
-

You need to create a new Azure file share.

What should you use? To answer, select the service in the answer area.

NOTE: Each correct selection is worth one point.

387)
388)

What should you use to prevent traffic from an Azure virtual network from being
routed to an Azure Storage account via the internet?

• A. a network security group (NSG)

• B. a public endpoint
• C. Azure VPN Gateway
• D. a service endpoint

389)

Which service can replace a resource lock automatically if the lock is removed?

• A. Azure Information Protection (AIP)

• B. Azure Blueprints Most Voted
• C. Azure Backup
• D. Azure Advisor

390) entra id

391)
392)

You plan to collect and analyze event details for five Azure virtual machines.

You need to run queries to compare the event details collected from all the virtual
machines.

Which two tools should you use? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

• A. Azure Service Health

• B. Azure Service Bus
• C. Azure Monitor Most Voted
• D. Azure Advisor
• E. Log Analytics Most Voted

393)

394)

What should you use to track the costs of Azure resources?

• A. Azure Quickstart templates

• B. tags
• C. budgets Most Voted
 • D. usage and quotas

395)

You have an Azure subscription.

You plan to create a virtual machine.

Where will the virtual machine be placed in Azure?

• A. In a storage account
• B. In a resource group Most Voted
• C. In an administrative unit
• D. In an application group

396)

397)

398)

You plan to reduce ongoing Azure expenditures.

You need to identify which factors affect the costs of a resource.

Which three factors should you identify? Each correct answer presents a complete
solution.

• A. the volume of outbound data Most Voted

• B. the volume of inbound data
• C. the service tier Most Voted
• D. the Azure region Most Voted
• E. the type of processed data
399)

Your company has an Azure subscription that contains several resources.

You need to identify which department is responsible for the cost of each resource.

What should you use?

• A. budgets
• B. alerts
• C. tags Most Voted

400)

401)

402)

403)
404)

405)

406)

407)

You have on-premises servers that run Windows Server.

What should you implement to manage the servers by using the Azure portal?

• A. Azure Kubernetes Service (AKS)

• B. Azure Arc Most Voted
• C. Docker
 • D. role-based access control (RBAC)

408)

409)

410)

You have a web app that runs in Azure.

You need to identify the amount of time it takes for web pages to load in a user's
browser.

What should you use?

• A. Azure Monitor alerts

• B. Application Insights in Azure Monitor Most Voted
• C. Log Analytics
• D. Azure Network Watcher

411)

412)

What should a desktop application use to interact with Azure and manage resources?

• A. APIs
• B. Azure Resource Manager (ARM) templates
• C. Azure Command-Line Interface (CLI)
 • D. Azure Cloud Shell

413)

414)

415)

416)

Which two features or services can be integrated with Azure Monitor? Each correct
answer presents part of the solution.

NOTE: Each correct answer is worth one point.

• A. Azure status
• B. Application Insights Most Voted
• C. Azure Advisor
• D. Log Analytics Most Voted
• E. Azure Service Health

417)

What provides a unified way to project and manage non-Azure resources in Azure
Resource Manager (ARM)?

• A. Azure Migrate
• B. Azure AD Connect
 • C. Azure Arc Most Voted
• D. Azure Front Door

418)

419)

420)

Your company has an Azure subscription and three business units.

You plan to deploy new resources for each business unit.

You need to ensure that the new resources are deployed by using a repeatable and
reliable method that applies the same configurations to each resource.

What should you use?

• A. Azure Policy
• B. Azure Arc
• C. a resource group
• D. Azure Resource Manager (ARM) templates Most Voted

421)

422)
423)

424)

In the software as a service (SaaS) cloud service, which responsibility is shared

between Microsoft and the customer?

• A. identity and directory infrastructure management Most Voted

• B. application management
• C. information and data management
• D. operating system updates

425)

Where does Azure Monitor store event data?

• A. an Azure Blob Storage account

• B. Azure Storage Queue
• C. Azure SQL Database
• D. a Log Analytics workspace Most Voted

426)
427)

An Azure administrator plans to run a PowerShell script that creates Azure

resources.

You need to recommend which computer configuration to use to run the script.

Which three computers can run the script? Each correct answer presents a complete
solution.

NOTE: Each correct selection is worth one point.

• A. a computer that runs Windows 11 and has the Azure CLI tools installed Most
Voted
• B. a computer that runs Linux and has the Azure CLI tools installed
• C. a computer that runs macOS and has PowerShell Core 6.0 installed
• D. a computer that runs Chrome OS and uses Azure Cloud Shell Most Voted
• E. a computer that runs Windows 10 and has the Azure PowerShell module
installed Most Vote

428)

429)

In the infrastructure as a service (IaaS) cloud service model, which two components
are the responsibility of the cloud service provider? Each correct answer presents a
complete solution.

NOTE: Each correct selection is worth one point.

• A. the configuration and maintenance of storage

• B. the installation and configuration of the operating system
 • C. maintaining the hardware Most Voted
• D. the network configuration
• E. physical security of the datacenter infrastructure Most Voted

430)

431)

432) NO / NO / YES

433)

434)

You have an Azure Storage account named storage1.

You need to ensure that containers can be created in, but not deleted from, storage1.

What should you do?

• A. Create a ReadOnly lock for storage1.

• B. Create a delete lock for storage1. Most Voted
 • C. Enable container soft delete.
• D. Enable blob soft delete.

435)

You have an Azure subscription.

You need to use Azure Cloud Shell to run a deployment script.

What should you use to access Cloud Shell?

• A. Azure Resource Manager (ARM)

• B. Microsoft Visual Studio
• C. a Windows command prompt
• D. a web browser Most Voted

436)

437)

438)

You need to migrate an on-premises server by using a lift-and-shift migration.

To which type of cloud service should you migrate?

• A. infrastructure as a service (IaaS) Most Voted

• B. software as a service (SaaS)
 • C. platform as a service (PaaS)

439)

440)

441)

442)

443)

444)
445)

446)

447) Y N Y

448)

449)

1. Management Groups 2. Subscriptions 3. Resource Groups 4. Resources

450)

451)

Multifactor authentication (MFA) → Haut Sécurité - Inconvenient (En haut à gauche)

Password authentication → Bas Sécurité - Convenant (En bas à droite)

Passwordless authentication → Haut Sécurité - Convenant (En haut à droite)

452)

How many data copies are stored in gee-zone-redundant storage (GZRS)?

• A. 2
• B. 3
• C. 6 Most Voted
• D. 12

453)
454)

455)