Question 1: Correct

Which Azure service is the recommended Identity-as-a-Service

offering inside Azure?

 Azure Portal
 Azure Front Door
 Azure Active Directory (AD)

(Correct)

 Identity and Access Management (IAM)

Explanation
Azure AD is the identity service designed for web protocols, that you can
use for your applications.

For more
info: https://docs.microsoft.com/en-us/azure/active-directory/fundamentals
/active-directory-whatis

Question 2: Correct
True or false: Azure charges for bandwidth used "inbound" to
Azure

 FALSE

(Correct)

 TRUE

Explanation
Ingress bandwidth is free. You pay for egress (outbound).

For more info: https://azure.microsoft.com/en-us/pricing/details/bandwidth/

Question 3: Incorrect
Select all features part of Azure AD?
 Smart lockout

(Correct)

 Single sign-on

(Correct)

 Custom banned password list

(Correct)
  Log Alert Rule
 Device Management

(Correct)

Explanation
The Log Alert Rule is not a feature of Azure AD.

See: https://docs.microsoft.com/en-us/azure/active-directory/
fundamentals/active-directory-whatis#which-features-work-in-azure-ad

Question 4: Correct
What is the minimum charge for having an Azure Account each
month, even if you don't use any resources?

 $0

(Correct)

 Negotiated with your enterprise manager

 $200
 $1

Explanation
An Azure account can cost nothing if you don't use any resources or only
use free resources

For more info: https://azure.microsoft.com/en-us/pricing/

Question 5: Correct
What is the service level agreement for two or more Azure Virtual
Machines that have been manually placed into different
Availability Zones in the same region?

 99.99%

(Correct)

 99.90%
 99.95%
 100%

Explanation
99.99%

For more info: https://azure.microsoft.com/en-us/support/legal/sla/virtual-

machines/v1_9/
 Question 6: Incorrect
What does it mean if a service is in General Availability (GA)
mode?

 You have to apply to get selected in order to use that service

(Incorrect)

 The service has now reached public preview, and Microsoft

will provide support for it
 Anyone can use the service for any reason

(Correct)

 Anyone can use the service but it must not be for production
use

Explanation
Anyone can use a GA service. It is fully supported and can be used for
production.

For more info: https://azure.microsoft.com/en-us/support/legal/preview-

supplemental-terms/

Question 7: Incorrect
What is the benefit of using a command line tool like Powershell
or CLI as opposed to the Azure portal?

 Cheaper
 Automation

(Correct)

 Quicker to deploy VMs

(Incorrect)

Explanation
The real benefit is automation. Being able to write a script to do something
is better than having to do it manually each time.

For more info on Azure

CLI: https://docs.microsoft.com/en-us/cli/azure/what-is-azure-cli?
view=azure-cli-latest

For more info on Azure

Powershell: https://docs.microsoft.com/en-us/powershell/azure/?
view=azps-4.5.0
 Question 8: Correct
If you are a US federal, state, local, or tribal government entities
and their solution providers, which Azure option should you be
looking to register for?

 Azure Government

(Correct)

 Azure Department of Defence

 Azure Public Portal
 Azure is not available for government officials

Explanation
Hopefully, it's clear that US Federal, State, Local and Tribal governments
can use the US Government portal

For more
info: https://docs.microsoft.com/en-us/azure/azure-government/documenta
tion-government-welcome

Question 9: Correct
What does ARM stand for in Azure?

 Availability, Reliability, Maintainability

 Azure Resource Manager

(Correct)

 Advanced RISC Machine

 Account Resource Manager

Explanation
Azure Resource Manager (ARM) - this is the common resource deployment
model that underlies all resource creation or modification; no matter
whether you use the portal, powershell or the SDK, the Azure Resource
Manager takes those commands and executes them

For more info: https://docs.microsoft.com/en-us/azure/azure-resource-

manager/management/overview

Question 10: Correct

Which of the following cloud computing models requires the highest level
of involvement in maintaining the operating system and file system by the
customer?

 IaaS

(Correct)
  FaaS
 SaaS
 PaaS

Explanation
IaaS or Infrastructure as a service requires you to keep your OS patched,
close ports, and generally protect your own server

For more info: https://azure.microsoft.com/en-us/overview/what-is-iaas/

Question 11: Correct

What makes estimating the cost of an unmanaged storage
account difficult?

 The cost of storage changes frequently

 You are charged for data leaving Azure, and it's difficult to
predict that

(Correct)

 You are charged for data coming into Azure, and it's difficult
to predict that
 There is no way to predict the amount of data in the account

Explanation
There is a cost for egress (bandwidth out) and it's hard to estimate how
many bytes will be counted leaving an Azure network

For more
info: https://azure.microsoft.com/en-us/pricing/details/storage/page-blobs/

Question 12: Incorrect

What is the concept of Availability?

 A system that has a single point of failure

 A system must have 100% uptime to be considered available
 The percentage of time a system responds properly to
requests, expressed as a percentage over time

(Correct)

 A system that can scale up and scale down depending on

customer demand

(Incorrect)

Explanation
Availability - what percentage of time does a system respond properly to
requests, expressed as a percentage over time
For more information on region and availability zones
see: https://docs.microsoft.com/en-us/azure/availability-zones/az-overview

For more information on availability options for virtual machines

see: https://docs.microsoft.com/en-us/azure/virtual-machines/availability

Question 13: Correct

What Azure resource allows you to evenly split traffic coming in
and direct it to several identical virtual machines to do the work
and respond to the request?

 Azure Logic Apps

 Virtual Network
 Azure App Services
 Load Balancer or Application Gateway

(Correct)

Explanation
This is the core feature of either a Load Balancer or Application Gateway

For more info: https://docs.microsoft.com/en-us/azure/load-balancer/load-

balancer-overview

Question 14: Correct

What Azure product allows you to autoscale virtual machines from
1 to 1000 instances, and also provides load balancing services
built in?

 Azure App Services

 Azure Virtual Machines
 Application Gateway
 Virtual Machine Scale Sets

(Correct)

Explanation
Virtual Machine Scale Sets - these are a set of identical virtual machines
(from 1 to 1000 instances) that are designed to auto-scale up and down
based on user demand; IaaS

For more info: https://azure.microsoft.com/en-us/services/virtual-machine-

scale-sets/

Question 15: Incorrect

Application Gateway contains what additional optional security
feature over a regular Load Balancer?

 Azure AD Advanced Information Protection

 (Incorrect)

 Web Application Firewall (or WAF)

(Correct)

 Multi-Factor Authentication
 Advanced DDoS Protection

Explanation
Application Gateways also comes with an optional Web Application Firewall
(or WAF) as a security benefit

For more info: https://docs.microsoft.com/en-us/azure/web-application-

firewall/ag/ag-overview

Question 16: Correct

Within the context of privacy and compliance, what does the
acronym ISO stand for, in English?

 International Organization for Standardization

(Correct)

 Instead of
 Information Systems Officer
 Intelligence and Security Office

Explanation
ISO is a standards body, International Organization for Standardization

For more info: https://www.iso.org/about-us.html

Question 17: Incorrect

What is the maximum amount of Azure Storage space a single
subscription can store?

 5 PB

(Incorrect)

 500 GB
 2 TB
 Virtually unlimited

(Correct)

Explanation
A single Azure subscription can have up to 250 storage accounts per
region, and each storage account can store up to 5 Petabytes. That is 31
million Terabytes. This is probably 15-20 times what Google, Amazon,
Microsoft and Facebook use combined. That's a lot.

For more info: https://docs.microsoft.com/en-us/azure/azure-resource-

manager/management/azure-subscription-service-limits#storage-limits

Question 18: Correct

What is the benefit of using Powershell over CLI?

 Quicker to deploy VMs

 Cheaper
 No benefit, it's the same

(Correct)

 More powerful commands

Explanation
There is no benefit, only a matter of personal choice.

For more info on Azure

CLI: https://docs.microsoft.com/en-us/cli/azure/what-is-azure-cli?
view=azure-cli-latest

For more info on Azure

Powershell: https://docs.microsoft.com/en-us/powershell/azure/?
view=azps-4.5.0

Question 19: Correct

What is the new data privacy and information protection
regulation that took effect across Europe in May 2018?

 FedRAMP
 PCI DSS
 GDPR

(Correct)

 ISO 9001:2015

Explanation
The General Data Protection Regulation (GDPR) took effect in Europe in
May 2018.

For more
info: https://docs.microsoft.com/en-us/microsoft-365/compliance/gdpr?
view=o365-worldwide
 Question 20: Incorrect
Which of the following scenarios would Azure Policy be a
recommended method for enforcement?

 Allow only one specific roles of users to have access to a

resource group
 Add an additional prompt when creating a resource without
a specific tag to ask the user if they are really sure they
want to continue?

(Incorrect)

 Require a virtual machine to always update to the latest

security patches
 Prevent certain Azure Virtual Machine instance types from
being used in a resource group

(Correct)

Explanation
Azure Policy can add restrictions on storage account SKUs, virtual machine
instance types, and rules relating to tagging of resources and groups. It
cannot prompt a user to ask them if they are sure.

For more
info: https://docs.microsoft.com/en-us/azure/governance/policy/overview

Question 21: Correct

In what way does Multi-Factor Authentication increase the security of a
user account?

 It doesn't. Multi-Factor Authentication is more about access

and authentication than account security.
 It requires users to be approved before they can log in for
the first time.
 It requires single sign-on functionality
 It requires the user to possess something like their phone to
read an SMS, use a mobile app, or biometric identification.

(Correct)

Explanation
MFA requires that the user have access to their mobile phone for using
SMS or an app.

For more
info: https://docs.microsoft.com/en-us/azure/active-directory/authenticatio
n/concept-mfa-howitworks
 Question 22: Correct
In which US state is the East US 2 region?

 Texas
 Virginia

(Correct)

 California
 Iowa

Explanation
East US 2 is in the Eastern state of Virginia, close to Washington DC

For more
info: https://azure.microsoft.com/en-us/global-infrastructure/data-
residency/

Question 23: Correct

Why is Azure App Services considered Platform as a Service?
 You give Azure the code and configuration, and you have no
access to the underlying hardware

(Correct)

 Azure App Services is not PaaS, it's Software as a Service.

 You can decide on what type of virtual machine it runs - A-
series, or D-series, or even H-series
 You are responsible for keeping the operating system up to
date with the latest patches

Explanation
You give Azure the code and configuration, and you have no access to the
underlying hardware

For more
info: https://docs.microsoft.com/en-us/azure/app-service/overview

Question 24: Correct

Select the way(s) to increase the security of a traditional user id and
password system?

 Require longer and more complex passwords.

(Correct)

 Require users to change their passwords more frequently.

(Correct)
  Do not allow users to log into an application except using a
company registered device.

(Correct)

 Use multi-factor authentication which requires an additional

device (something you have) to verify identity.

(Correct)

Explanation
All of these are ways to increase the security on an account.

For more info:

https://docs.microsoft.com/en-us/azure/active-directory/authentication/
concept-password-ban-bad

https://docs.microsoft.com/en-us/azure/active-directory-domain-services/
password-policy

https://docs.microsoft.com/en-us/azure/active-directory/authentication/
concept-sspr-policy

Question 25: Incorrect

How many regions does Azure have in Brazil?

 2
 4
 0

(Incorrect)

 1

(Correct)

Explanation
There is 1 region in Brazil.

For more
info: https://azure.microsoft.com/en-us/global-infrastructure/geographies/

Question 26: Incorrect

Which of the following elements is considered part of the
"perimeter" layer of security?

 Use a firewall
 (Correct)

 Locks on the data center doors

 Keep operating systems up to date with patches
 Separate servers into distinct subnets by role

(Incorrect)

Explanation
Firewall is part of the perimeter security

For more information on the layered approach to network

security: https://docs.microsoft.com/en-us/learn/modules/intro-to-security-
in-azure/5-network-security

Question 27: Incorrect

What is the concept of paired regions?

 Each region of the world has one other region, usually in a

completely separate country and geography, where it makes
the most sense to place your backups. Like East US 2 is
paired with South Korea.
 When you deploy your code to one region of the world, it is
automatically deployed to the paired region as an
emergency backup.

(Incorrect)

 Azure employees in those regions sometimes go on picnics

together.
 Each region in the world has at least one other region in
which is shares an extremely high speed connection, and
where there is coordinated action by Azure not to do
anything that will bring them both down at the same time.

(Correct)

Explanation
Paired regions are usually in the same geo (not always) but are the most
logical place to store backups because they have a high speed connection
and Azure staggers the service updates to those regions.

For more info: https://docs.microsoft.com/en-us/azure/best-practices-

availability-paired-regions

Question 28: Correct

Which of the following is not an example of Infrastructure as a
Service?
  Virtual Machine Scale Sets
 Virtual Machine
 Virtual Network
 SQL Server in a VM
 Azure SQL Database

(Correct)

Explanation
With Azure SQL Database, the infrastructure is not in your control

For more info: https://docs.microsoft.com/en-us/azure/azure-sql/azure-sql-

iaas-vs-paas-what-is-overview

Question 29: Incorrect

Which tool within Azure is comprised of : Azure Status, Service Health and
Resource Health?

 Azure Monitor

(Incorrect)

 Azure Service Health

(Correct)

 Azure Advisor
 Azure Dashboard

Explanation
Azure Service Health - lets you know about any Azure-related service
issues including region-wide downtime

For more info: https://docs.microsoft.com/en-us/azure/service-health/

Question 30: Correct

Why is a user id and password sometimes not enough to prove someone is
who they say they are?

 User id and password can be used by anyone such as a co-

worker, ex-employee or hacker half-way around the world

(Correct)

 Passwords are usually easy to forget

 Some people might choose the same user id and password
 Passwords must be encrypted before being stored

Explanation
The truth is that someone can find a way to get a user id and password,
even guess it, and that can be used by another person.

For more information on other ways to prove self-identification such as

Multi-Factor Authentication: https://docs.microsoft.com/en-us/azure/active-
directory/authentication/concept-mfa-howitworks

Question 31: Incorrect

Which of the following is not a feature of Azure Functions?

 Can possibly cost you nothing as there is a generous free

tier
 Can edit the code right in the Azure Portal using a code
editor

(Incorrect)

 Can trigger the function based off of Azure events such as a

new file being saved to a storage account blob container
 Designed for backend batch applications that are
continuously running

(Correct)

Explanation
Functions are designed for short pieces of code that start and end quickly.

For more info: https://docs.microsoft.com/en-us/azure/azure-functions/

Question 32: Correct

What two types of DDoS protection services does Azure provide?
Select two.
 DDoS Network Protection

(Correct)

 DDoS IP Protection

(Correct)

 DDoS Premium Protection

 DDoS Advanced Protection
Explanation
Azure DDoS Protection offers two types of DDoS protection services:
 Network Protection protects against volumetric attacks that target
the network infrastructure. This type of protection is available for all
Azure resources that are deployed in a virtual network.
 IP Protection protects against volumetric and protocol-based
attacks that target specific public IP addresses. This type of
 protection is available for public IP addresses that are not deployed
in a virtual network.

For more
info: https://docs.microsoft.com/en-us/azure/virtual-network/ddos-
protection-overview

Question 33: Correct

True or false: Azure Cloud Shell allows access to the Bash and Powershell
consoles in the Azure Portal

 TRUE

(Correct)

 FALSE

Explanation
Cloud Shell - allows access to the Bash and Powershell consoles in the
Azure Portal

For more info: https://docs.microsoft.com/en-us/azure/cloud-shell/overview

Question 34: Incorrect

What does it mean if a service is in Public Preview mode?

 Anyone can use the service but it must not be for production
use

(Correct)

 The service is generally available for use, and Microsoft will

provide support for it

(Incorrect)

 Anyone can use the service for any reason

 You have to apply to get selected in order to use that service

Explanation
Public Preview is for anyone to use, but it is not supported nor guaranteed
to continue to be available

For more info: https://azure.microsoft.com/en-us/support/legal/preview-

supplemental-terms/

Question 35: Incorrect

Which of the following is considered a downside to using Capital
Expenditure (CapEx)?
  You are not guaranteed to make a profit

(Incorrect)

 You can deduct expenses as they occur

 It does not require a lot of up front money
 You must wait over a period of years to depreciate that
investment on your taxes

(Correct)

Explanation
One of the downsides of CapEx is that the money invested cannot be
deducted immediately from your taxes

For more info: https://docs.microsoft.com/en-us/learn/modules/principles-

cloud-computing/3c-capex-vs-opex

Question 36: Incorrect

How do you get access to services in Private Preview mode?

 You must apply to use them.

(Correct)

 They are available in the marketplace. You simply use them.

 You cannot use private preview services.
 You must agree to a terms of use first.

(Incorrect)

Explanation
Private Preview means you must apply to use them.

For more info: https://azure.microsoft.com/en-us/support/legal/preview-

supplemental-terms/

Question 37: Incorrect

Besides Azure Service Health, where else can you find out any
issues that affect the Azure global network that affect you?

 Azure Updates Blog

(Incorrect)

 Each Virtual Machine has a Resource Health blade

(Correct)
  Install the Azure app on your phone
 Azure will email you

Explanation
Each Virtual Machine has a Resource Health blade

For more
info: https://docs.microsoft.com/en-us/azure/service-health/resource-
health-overview

Question 38: Correct

Where do you go within the Azure Portal to find all of the third-
party virtual machine and other offers?

 Choose an image when creating a VM

 Azure Marketplace

(Correct)

 Azure mobile app

 Bing

Explanation
Azure Marketplace contains thousands of services you can rent within the
cloud

For more info: https://azuremarketplace.microsoft.com/en-us

Question 39: Correct

What would be a good reason to have multiple Azure
subscriptions?
 There is one person/credit card paying for resources, and
only one person who logs into Azure to manage the
resources, but you want to be able to know which resources
are used for which client project.
 There is one person/credit card paying for resources, but
many people who have accounts in Azure, and you need to
separate out resources between clients so that there is
absolutely no chance of resources being exposed between
them.

(Correct)

Explanation
Having multiple subscriptions can technically be done for any reason, but
it only makes sense if you have to separate billing directly, or have actual
clients logging into the Portal to manage their resources.
For more
info: https://docs.microsoft.com/en-us/microsoft-365/enterprise/subscriptio
ns-licenses-accounts-and-tenants-for-microsoft-cloud-offerings?
view=o365-worldwide

Question 40: Correct

Windows servers use "remote desktop protocol" (RDP) in order for
administrators to get access to manage the server. Linux servers use SSH.
What is the recommendation for ensuring the security of these protocols?

 Do not enable SSH access for Linux servers

 Do not allow public Internet access over the RDP and SSH
ports directly to the server. Instead use a secure server like
Bastion to control access to the servers behind.

(Correct)

 Ensure strong passwords on your Windows admin accounts

 Disable RDP access using the Windows Services control
panel admin tool

Explanation
You need to either control access to the RDP and SSH ports to a very
specific range of IPs, enable the ports only when you are using it, or use a
Bastion server/jump box to protect those servers.

For more info: https://docs.microsoft.com/en-us/azure/bastion/bastion-

overview

Question 41: Correct

Approximately how many regions does Azure have around the
world?

 25
 10
 60+

(Correct)

 40
Explanation
There are 60+ Azure regions currently, in 10+ geographies

For more
info: https://docs.microsoft.com/en-us/azure/availability-zones/az-region

Question 42: Correct

Which of the following is a good example of a Hybrid cloud?
  Your users are inside your corporate network but your
applications and data are in the cloud.
 A server runs in your own environment, but places files in
the cloud so that it can extend the amount of storage it has
access to.

(Correct)

 Technology that allows you to grow living tissue on top of an

exoskeleton, making Terminators impossible to spot among
humans.
 Your code is a mobile app that runs on iOS and Android
phones, but it uses a database in the cloud.

Explanation
Hybrid Cloud - A mixture between your own private networks and servers,
and using the public cloud for some things. Typically used to take
advantage of the unlimited, inexpensive growth benefits of the public
cloud.

For more info: https://azure.microsoft.com/en-us/overview/what-is-hybrid-

cloud-computing/

Question 43: Correct

Which free Azure security service checks all traffic travelling over
a subnet against a set of rules before allowing it in, or out.

 Network Security Group

(Correct)

 Azure DDoS Protection

 Azure Firewall
 Advanced Threat Protection (ARP)

Explanation
Network Security Group (NSG) - a fairly basic set of rules that you can
apply to both inbound traffic and outbound traffic that lets you specify
what sources, destinations and ports are allowed to travel through from
outside the virtual network to inside the virtual network

For more
info: https://docs.microsoft.com/en-us/azure/virtual-network/security-
overview

Question 44: Correct

What database service is specifically designed to be extremely
fast in responding to requests for small amounts of data (called
low latency)?
  SQL Data Warehouse
 Cosmos DB

(Correct)

 SQL Server in a VM
 SQL Database

Explanation
Cosmos DB - extremely low latency (fast) storage designed for smaller
pieces of data quickly; SaaS

For more info: https://docs.microsoft.com/en-us/azure/cosmos-db/

Question 45: Correct

What types of files can a Content Delivery Network speed up the
delivery of?

 JavaScript files

(Correct)

 Images

(Correct)

 PDFs

(Correct)

 Videos

(Correct)

Explanation
All of them. Any static file that doesn't change.

For more info: https://docs.microsoft.com/en-us/azure/cdn/cdn-overview

Question 46: Correct

What is a benefit of economies of scale?
 Big companies don't need to make a profit on the first
product they sell you, because they will make a profit on the
second
 The more you buy of something, the cheaper it is for you

(Correct)
  Prices of cloud servers and services are always going down.
It'll be cheaper next year than it is this year.
 Big companies don't need to make a profit on every sale

Explanation
Economies of Scale - the more of an item that you buy, the cheaper it is
per unit

For more info: https://docs.microsoft.com/en-us/learn/modules/principles-

cloud-computing/3b-economies-of-scale

Question 47: Incorrect

What is the concept of being able to get your applications and
data running in another environment quickly?

 Azure Blueprint

(Incorrect)

 Reproducible deployments
 Business Continuity / Disaster Recovery (BC/DR)

(Correct)

 Azure Devops

Explanation
Disaster Recovery - the ability to recover from a big failure within an
acceptable period of time, with an acceptable amount of data lost

For more info on Backup and Disaster

Recovery: https://azure.microsoft.com/en-us/solutions/backup-and-
disaster-recovery/

For more info on Azure’s built-in disaster recovery as a service

(DRaaS): https://azure.microsoft.com/en-us/services/site-recovery/

Question 48: Correct

What is the concept of Big Data?

 A set of Azure services that allow you to use execute code in

the cloud but don’t require (or even allow) you to manage
the underlying server
 A small sensor or other device that constantly sends it's
status and other data to the cloud
 A form of artificial intelligence (AI) that allows systems to
automatically learn and improve from experience without
being explicitly programmed.
  An extremely large set of data that you want to ingest and
do analysis on; traditional software like SQL Server cannot
handle Big Data as efficiently as specialized products

(Correct)

Explanation
Big Data - a set of open source (Apache Hadoop) products that can do
analysis on millions and billions of rows of data; current tools like SQL
Server are not good for this scale

For more
info: https://docs.microsoft.com/en-us/azure/architecture/guide/architectur
e-styles/big-data

Question 49: Incorrect

What is the Azure SLA for two or more Virtual Machines in an
Availability Set?

 99.95%

(Correct)

 99.99%

(Incorrect)

 99.90%
 100%

Explanation
99.95%

For more info: https://azure.microsoft.com/en-us/support/legal/sla/virtual-

machines/v1_9/

Question 50: Correct

Each person has their own user id and password to log into Azure.
But how many subscriptions can a single account be associated
with?

 10
 One
 250 per region
 No limit

(Correct)

Explanation
There is not a limit to the number of subscriptions a single user can be
included on.