azure services

A company has a resource group named 'RG-Prod' that contains critical virtual machines (VMs), virtual networks, and a SQL database. The infrastructure team needs to grant a group of developers the ability to start, stop, and restart only the VMs in RG-Prod. The developers must not be able to create new VMs, delete existing VMs, modify the virtual networks, or access the database. The company wants to follow the principle of least privilege. Which Azure role-based access control (RBAC) approach should the company use?

A company manages its production workloads in a dedicated Azure subscription under the root management group. The infrastructure team recently created a critical resource group named 'rg-prod-core' that contains networking resources. To prevent accidental deletion of this entire resource group, the team needs a mechanism that blocks delete operations on 'rg-prod-core' while still allowing changes to resources within it. The solution must not affect any other resource groups in the subscription. Which Azure feature should the team apply to 'rg-prod-core'?

A company plans to migrate a line-of-business application to Azure. The application will run on a virtual machine (IaaS). The company wants to ensure that the operating system is kept up to date with security patches. According to the shared responsibility model, who is primarily responsible for applying these patches?

A company needs to store backup data that must be retained for 7 years. They want to store the data as cheaply as possible, and access may be rare. Which Azure Storage access tier is most cost-effective?

Match each Azure pricing model to its definition.

Which Azure compliance feature allows organizations to understand which standards and regulations Azure services comply with?

Which statement accurately describes the consumption-based pricing model in cloud computing?

What does Azure Auto-Shutdown for virtual machines provide?

A company wants to move from an on-premises data center to Azure. They currently budget for purchasing servers, networking equipment, and software licenses as a one-time capital expense. In Azure, they will pay a monthly fee based on the resources they use. What type of cloud benefit does this represent?

Which term describes the practice of deploying resources across multiple Azure availability zones to protect against datacenter-level failures?

A healthcare company is planning to migrate its on-premises data center to Azure. The CFO wants to shift from making large upfront hardware purchases to paying for IT resources as an ongoing operational cost. Which cloud computing benefit does this scenario describe?

A company deploys their application across multiple availability zones in an Azure region. This is done to improve which aspect of the application?

A company has a policy that all Azure resources must have a tag named 'CostCenter'. The governance team wants to automatically add the tag with a default value 'IT' to any new resource that is created without it. The team wants the tag to be applied during resource creation, not just report non-compliance. The solution must also support remediation for existing non-compliant resources if needed later. Which Azure Policy effect should the team use in their policy definition?

Which Azure service provides application-level, request-based routing with session persistence for web workloads?

A company runs a critical line-of-business application on Azure virtual machines. The operations team needs to receive proactive notifications about any upcoming planned maintenance events that could affect their virtual machines, as well as real-time alerts when a service incident occurs in the Azure region where the application is deployed. The team wants a native Azure solution that provides a personalized view of all service health events relevant to their subscriptions, including historical incident reports. Which Azure service should the operations team use?

A company wants to ensure its Azure resources are deployed in a geographic location that is paired with another region for disaster recovery. If a regional outage occurs, they plan to failover to the paired region. Which concept does this describe?

A company manages hundreds of Azure SQL databases across multiple subscriptions. The compliance team requires that every Azure SQL database has diagnostic settings enabled to send logs to a central Log Analytics workspace. The team wants a solution that automatically configures diagnostic settings for any new Azure SQL database when it is created, without requiring manual intervention or additional scripting. Which Azure governance feature should the team use?

Which Azure service provides managed relational database compatible with open-source PostgreSQL?

A company wants to ensure that all new Azure resources in a subscription are automatically tagged with a 'Department' tag. Which Azure service should they use to enforce this requirement?

A software company develops a microservices application using Docker containers. The application consists of multiple services that need to be deployed, scaled, and managed together. The company wants to use Azure to orchestrate and manage these containers without provisioning or managing the underlying virtual machines. Which Azure service should they use?

Which Azure service enables serverless compute for running containers with scale-to-zero capabilities?

What is the purpose of Azure Policy initiatives (policy sets)?

A company uses Azure Blueprints to enforce a standard landing zone for all development subscriptions. The blueprint includes a virtual network, subnets, and network security groups. After the blueprint is assigned to a subscription, a development team manually adds a new subnet to the virtual network. The company plans to update the blueprint to add a new network security group rule. When the updated blueprint is published and the assignment is updated, what will happen to the manually added subnet?

Which cloud concept allows businesses to deploy applications to global markets quickly without building physical infrastructure in those locations?

Match each Azure identity service to its description.

Which Azure networking service acts as a software-defined WAN that connects branch offices, datacenters, and remote users through an optimized global network?

What is the purpose of Azure Active Directory B2C?

A company's development team wants to deploy a containerized application without worrying about the underlying virtual machines or Kubernetes control plane. They need a service that automatically manages the container orchestration, scales, and provides rolling updates. Which Azure compute service should they choose?

What is the Microsoft Trust Center?

A company has deployed a production Azure SQL Database that is used by a critical line-of-business application. The database administrators need to be able to change the database schema and scaling settings. However, the operations team must ensure that no one can accidentally delete the database or its server. The company does not want to implement a complex backup strategy for this prevention; they want a simple control that can be applied at the resource level without affecting other management operations. What should the operations team configure to meet these requirements?

What is the primary difference between a public cloud and a private cloud?

A multinational corporation must ensure that every new Azure subscription automatically conforms to corporate security and compliance baselines. The team wants to deploy a predefined set of Azure resources (e.g., a central logging storage account, a network security group configuration) and apply a standard set of Azure Policy definitions (e.g., restricting allowed VM sizes, enforcing encryption) to any new subscription. They want to manage these as a single, versioned package that can be updated and re-assigned to existing subscriptions. Which Azure service should they use?

A company wants to move from paying large upfront costs for hardware to a model where they only pay for what they use on a monthly basis. This represents a shift from CapEx to which type of expenditure?

Which Azure service provides automatic failover and load balancing for SQL Server databases across multiple Azure VMs?

A company stores billions of image files that are accessed frequently via HTTP from a web application. They need a highly scalable and durable storage solution with global accessibility. Which Azure storage service should they use?

A company plans to migrate a multi-tier web application to Azure. The frontend web tier must automatically scale out based on CPU utilization, and Microsoft must manage the underlying virtual machines and operating system. The backend tier requires a relational database with built-in high availability and automatic backups. The company wants to minimize administrative overhead. Which two Azure services should the company use?

A company runs a critical application on Azure VMs. They need to ensure that if one VM fails, the application continues to serve users with another VM. The VMs should be placed in a configuration that protects against failures within a single datacenter. Which feature should they use?

Which Azure networking feature enables resources in different Azure virtual networks to communicate as if they were on the same network?

Which of the following is an advantage of cloud computing related to speed of deployment?

What is the purpose of Azure's 'Secure Score' in Microsoft Defender for Cloud?

Which Azure feature ensures that users accessing sensitive applications must be on compliant corporate devices?

A company has multiple Azure subscriptions for different projects. They want to apply the same set of Azure policies and role assignments to all subscriptions under a specific department, and they plan to add more subscriptions in the future. Which Azure construct should they use?

Which Azure service provides a way to run Windows-based desktop applications from any device without installing them locally?

A company runs multiple virtual machines (VMs) in Azure. The IT team notices that their VMs are hosted on physical hardware that is shared among multiple customers. The team has no ability to specify or control which physical server their VMs run on, and they cannot see the underlying hardware details. The VMs are, however, always available when requested. This scenario exemplifies which essential characteristic of cloud computing as defined by the National Institute of Standards and Technology (NIST)?

What happens when an Azure subscription reaches its spending limit?

A company uses Azure Policy to enforce resource tagging. The governance team creates a policy that requires all resources in a subscription to have a 'CostCenter' tag. However, the team does not want to block resource creation if the tag is missing. Instead, they want the policy to automatically add the tag with a default value of 'Unassigned' to any new resource that is created without the tag. Which Azure Policy effect should the team configure in the policy definition?

A company has a single Azure subscription that contains multiple resource groups for different departments. The security team needs to ensure that only members of the 'VM Operators' Azure Active Directory group can create virtual machines in the subscription. All other users, including subscription Owners, must be blocked from creating virtual machines. Which Azure feature should the security team use to enforce this requirement?

A company is evaluating whether to move to cloud. Their IT manager says they are concerned about losing control over their data. Which Azure feature MOST directly addresses this concern?

A company needs to store archival data for 10 years with the lowest possible storage cost. Data may be accessed once a year for compliance audits. Which Azure Storage access tier should they choose?

Which Azure tool provides personalized recommendations to improve the security, performance, cost, and reliability of your Azure resources?

Which Azure compute size family is optimized for memory-intensive workloads like large in-memory analytics or SAP HANA?

Which statement best describes the 'economies of scale' advantage of cloud computing for customers?

A financial services company runs a critical trading application in its on-premises data center. The company is migrating some workloads to Azure and requires a dedicated, private network connection between its on-premises network and Azure. The connection must not use the public internet, must provide consistent latency and higher bandwidth than a typical internet-based VPN, and must be backed by a service-level agreement (SLA) for availability. Which Azure service should the company use to meet these requirements?

A company wants to move its on-premises applications to the cloud to benefit from the ability to quickly scale resources up or down based on demand. They want to pay only for what they use. This combination of characteristics is known as:

What does 'high availability' mean in Azure?

Which Azure feature allows organizations to track spending trends and get spending forecasts for the next 30 days?

What is the purpose of Azure Availability Zones?

Which Azure service helps organizations understand their compliance status against regulatory standards like ISO 27001, PCI DSS, and NIST?

Which Azure service provides a fully managed relational database with built-in high availability, automated backups, and intelligent performance optimization for SQL Server workloads?

Which Azure region feature pairs two regions together for business continuity and disaster recovery?

A company uses Azure Blueprints to define a standard environment with policies, role assignments, and resource groups. They publish a new version of the blueprint that adds a new role assignment. However, existing subscriptions created from older versions do not have this new role assignment. What must they do to apply the update to existing subscriptions?

A company hosts a web application in the West US region on two Azure virtual machines that are in the same virtual network. The application handles user sessions that must persist on the same virtual machine for the duration of a checkout process. The company needs to load balance incoming HTTP traffic across the two virtual machines. If one virtual machine becomes unhealthy, the load balancer must automatically stop sending new traffic to that machine. Which Azure service should the company use?

A company wants to ensure that all Azure resources are tagged with metadata such as 'Environment' and 'Department'. They have created an Azure Policy that appends the required tags and their values when a resource is created. However, they notice that some resources created before the policy assignment are missing tags. They want to automatically add those tags without manual effort. What should they do?

A company manages multiple Azure subscriptions for different business units. They want to define a standard set of policies, such as allowed VM SKUs and required resource tags, and ensure these policies are always applied whenever a new subscription is created. Which Azure feature should they use to enforce governance at this level?

A company has multiple Azure subscriptions that are managed by different departments. The governance team needs to ensure that every new subscription follows a standardized set of compliance requirements, including specific Azure Policy definitions, a predefined role assignment for a central security group, and a base set of network resources. The solution must be reusable and allow the governance team to update the requirements centrally, with changes automatically applied to all subscriptions that use the same definition. Which Azure service should the governance team use?

An administrator wants to ensure that all Azure resources in a subscription have a 'CostCenter' tag applied. Which Azure service enforces this requirement?

Which Azure networking service provides a distributed, highly available, and scalable DNS service for routing users to the best-performing endpoint?

A company runs a web application on two Azure virtual machines in the same region. The application must be accessible from the internet, and incoming traffic should be distributed evenly across both VMs. Additionally, the company needs to offload Transport Layer Security (TLS) termination to a single service and route requests based on the URL path (e.g., /images to one set of VMs, /api to another). Which Azure service should the company use?

A multinational corporation wants to reduce its carbon footprint by shifting workloads to the cloud. They want to understand how using a cloud provider's shared infrastructure contributes to sustainability. Which cloud computing concept is most directly related to this environmental benefit?

What is the primary benefit of Azure Management Groups in a large enterprise with hundreds of subscriptions?

A company's CFO is evaluating the financial impact of moving the company's on-premises data center to Azure. The on-premises data center requires significant upfront investment for servers, storage, and networking equipment, which is depreciated over several years. In contrast, Azure offers a pay-as-you-go pricing model where the company pays only for the resources it consumes, with no upfront costs. The CFO wants to understand how this shift changes the company's financial reporting. Which statement accurately describes the financial difference between on-premises and cloud spending?

A company stores historical sales data in Azure Blob Storage. The data is accessed frequently during the first 30 days after upload, but after that, it is rarely accessed. The company wants to automatically move blobs to a lower-cost storage tier after 30 days without any manual scripting or custom code. Which Azure feature should they use?

Which Azure service provides a high-performance computing environment for running scientific, financial, and engineering simulations?

A company is designing a disaster recovery solution for a multi-tier application hosted in Azure. They need to ensure that if an entire Azure region becomes unavailable, the application can fail over to another region. The application uses Azure SQL Database. Which Azure feature should they use to replicate the database across regions?

A hospital stores sensitive patient data in the cloud. They want to ensure that data remains secure and that the cloud provider has implemented strict physical security controls, such as biometric access and 24/7 surveillance at datacenters. Which aspect of the shared responsibility model does this describe?

A company has a critical Azure resource group that contains production resources. They want to ensure that no one can accidentally delete or modify the resources in this group, even if they have Contributor permissions. Which Azure feature should they use?

A company wants to run a containerized application in Azure without managing any virtual machines. They need automatic scaling, load balancing, and service discovery. Which Azure compute service should they choose?

A company needs to store database connection strings and API keys securely, ensuring only authorized applications can access them. Which Azure service is designed for this?

Which cloud service model gives customers the most control over the underlying infrastructure, including the operating system and networking?

Which Azure service provides a virtual private network gateway for connecting on-premises networks to Azure virtual networks over the internet?

Which Azure service provides fully managed Apache Cassandra NoSQL database with automatic scaling and multi-region writes?

What is the key difference between an Azure 'region' and an Azure 'geography'?

A company is building a mobile app backend that handles HTTP requests from thousands of users. The traffic pattern is highly unpredictable: there can be sudden spikes to hundreds of requests per second followed by long periods of no activity. The development team wants a solution that automatically scales from zero to hundreds of instances based on demand, and they want to pay only for the compute time consumed when the code is actually executing. They do not want to manage any underlying infrastructure, such as virtual machines or containers. Which Azure compute service should they choose?

A company has a management group hierarchy: Root → UK → Production. They assign a policy at the Root level that allows only certain VM sizes. Later, they assign another policy at the UK level that denies all resources. What is the effective effect on the Production subscription?

An IT team manages a customer relationship management (CRM) application hosted on a single Azure virtual machine. As the number of users grows, the CPU and memory usage on the VM consistently exceed 90%. The team decides to increase the VM size from Standard_D2s_v3 (2 vCPUs, 8 GB RAM) to Standard_D8s_v3 (8 vCPUs, 32 GB RAM) to handle the increased load. The application is not designed to run on multiple servers simultaneously. This approach represents which type of scaling in the cloud?

Which tool allows you to automate the creation and management of Azure resources using declarative JSON or Bicep templates?

Which Azure service provides object storage with a hierarchical namespace optimized for big data and analytics workloads?

Which Azure IoT service provides end-to-end IoT solutions with pre-built industry templates and no-code/low-code configuration?

A company uses Azure and wants to ensure that their IT team receives alerts when virtual machines are deallocated unexpectedly. Which Azure service should they use to create a rule that triggers an action when a VM is deallocated?

Which Azure cloud benefit means organizations don't need to predict future resource needs exactly when planning infrastructure?

Match each Azure compute option to its description.

A company runs a global e-commerce platform. During a flash sale, demand surges from 10,000 users to 500,000 users in minutes. The platform automatically provisions additional servers to handle the load and deprovisions them after the sale. Which cloud characteristic is most directly demonstrated?

Which Azure service provides a unified security management system that strengthens the security posture of data centers and cloud workloads?

A global consulting firm has offices in New York, London, and Tokyo. They deployed a document management system on Azure App Service. Consultants need to access the system from any location worldwide using laptops or smartphones over public Wi-Fi or cellular networks, without needing a VPN connection. After deployment, all consultants can successfully log in and use the application from any internet-connected device. Which characteristic of cloud computing does this scenario best illustrate?

What is the purpose of Azure Cost Management budgets?

A company plans to migrate its on-premises SQL Server database to Azure. The database uses many features including SQL Server Agent jobs, cross-database queries, and CLR integration. The company wants a fully managed PaaS service that minimizes application code changes and supports native virtual network (VNet) integration without requiring a private endpoint. Which Azure service should the company use?

A manufacturing company is evaluating whether to migrate its on-premises workloads to Azure. The IT team calculates that the total cost of running the equivalent compute and storage resources in Azure is lower than operating its own datacenter. They attribute this cost advantage to the fact that Azure purchases servers, networking gear, and power in massive quantities and passes the savings on to customers by spreading the fixed costs across a vast number of tenants. This cost-saving benefit is a direct illustration of which cloud computing concept?

Which Azure service enables the creation of private endpoints so that Azure PaaS services like Storage and SQL Database are accessible only through a private IP within a VNet?

A global e-commerce company has deployed its web application in two Azure regions: West US and East US. The company wants to automatically route end users to the region that provides the lowest latency, and if an entire region becomes unavailable, gracefully redirect all traffic to the remaining healthy region. Which Azure service should the company use?

Which of the following is an example of a SaaS (Software as a Service) offering from Microsoft?

Which term describes the cloud's ability to quickly provision and de-provision resources to meet demand without human intervention?

Which Azure tool enables administrators to run PowerShell or Bash commands to manage Azure resources directly from a web browser without installing any tools locally?

A company wants to run a containerized application that responds to HTTP requests. They want to deploy it without managing any virtual machines or orchestration. Which Azure service is the simplest option?

A company wants to enforce a naming convention on all Azure resources by automatically adding a tag with the environment name (e.g., 'Env-Prod' or 'Env-Dev') when a resource is created. They do not want to block resource creation if the tag is missing. Which Azure Policy effect should they use?

Which Azure feature enables organizations to review and recertify privileged role assignments on a scheduled basis?

Which Azure security service provides a cloud-native firewall with built-in high availability and unrestricted cloud scalability?

A company wants to ensure that their cloud provider's physical data centers are located in specific geographic areas to comply with data residency requirements. Which cloud concept is this related to?

A company's CTO asks why Azure can offer services at lower costs than building an equivalent on-premises solution. Which cloud principle BEST explains this?

A global company creates a new Azure subscription for each major project. To ensure compliance and consistency, the governance team needs a single, versioned, auditable package that, when assigned to a subscription, automatically deploys a standard set of Azure Policy assignments, role assignments, a resource group structure, and a pre-configured virtual network. The solution must allow these packages to be updated centrally and have changes tracked for auditing. Which Azure service should the governance team use?

A company traditionally purchased physical servers and networking equipment every three years, paying the full cost upfront. They are now migrating their workloads to Azure virtual machines. The finance team wants to understand the primary financial benefit of the new cloud model. Which statement best describes this benefit?

What is the primary purpose of Azure subscriptions?

A manufacturing company runs its proprietary production scheduling software on on-premises servers. The IT team also manages on-premises file servers. The company decides to move its email system to Microsoft 365 but keeps all other systems on-premises. Which cloud deployment model does this scenario best describe?

Match each Azure service to its primary function.

A company plans to deploy a critical application across two Azure regions for disaster recovery. The compliance team requires that planned maintenance updates (such as OS patches to the underlying Azure infrastructure) must never be applied to both regions at the same time. The company also needs the data stored in the primary region to be automatically replicated to the secondary region. Which Azure architecture feature should the company rely on to meet the requirement of non-simultaneous updates?

A multinational company runs a web application that must serve users from around the world with low latency. The application is deployed in multiple Azure regions. The company also requires built-in protection against distributed denial-of-service (DDoS) attacks at the network layer. The solution must automatically route users to the closest healthy endpoint based on geographic location. Which Azure service should the company use?

A company needs to enforce compliance by deploying a standard set of Azure resources, policies, and RBAC assignments for each new development subscription. They want to define this environment as a repeatable package. Which Azure service should they use?

A company has several Azure subscriptions that contain hundreds of virtual machines. A new corporate standard requires that all VMs must use Azure managed disks instead of unmanaged disks. The governance team needs to automatically identify existing VMs with unmanaged disks and convert them to managed disks without requiring manual intervention for each VM. The team also wants to ensure that any new VMs created in the future automatically use managed disks. Which Azure feature should they use to meet both requirements?

Which Azure service provides a cloud-native SIEM (Security Information and Event Management) solution for detecting and responding to threats?

A company runs an on-premises line-of-business application that uses a SQL Server database. The database currently has 500 GB of data and is accessed by 50 users simultaneously. The company is planning to migrate this database to Azure. The IT team wants to minimize administrative overhead for patching the operating system and database engine, and for performing automated backups with point-in-time restore. The team also wants the ability to scale compute and storage independently without managing virtual machines. Which Azure service should they choose?

Which Azure service provides the ability to test and debug Azure applications locally that interact with Azure services?

A company uses Azure SQL Database for a web application. They need to ensure that the database can automatically scale to handle sudden spikes in traffic without downtime. Which feature should they enable?

Which Azure feature automatically identifies and informs you of Azure service issues that may be affecting your resources in your region?

Which Azure service acts as a cloud-based VPN gateway that enables secure site-to-site connectivity between an on-premises network and Azure virtual networks?

A cloud provider uses virtualization technology to host multiple customers on the same physical server. Each customer's data, applications, and operating systems are logically isolated and secured from one another. Which characteristic of cloud computing does this scenario best describe?

A company has an on-premises data center with a site-to-site VPN connection to Azure. The company wants to ensure that the connection remains secure by encrypting all traffic between the on-premises network and Azure virtual network. The connection must be established over the public internet. Which Azure service should the company use to create this encrypted tunnel?

Which Azure service enables automated build and release pipelines triggered by code changes in a Git repository?

Which Azure service provides a centralized view of all Azure resources and their health status, showing which resources are healthy, degraded, or unavailable?

Which of the following is an example of a 'hybrid cloud' deployment?

Which Azure pricing option offers the GREATEST discount compared to pay-as-you-go pricing for a stable, predictable workload that will run continuously for one year?

A company wants to query all Azure resources across multiple subscriptions to find all storage accounts without encryption enabled. They need to use a powerful query language to filter and join data. Which Azure tool should they use?

A company wants to track and manage costs across multiple Azure subscriptions. They have created a hierarchy of management groups: Root -> Department A -> Project 1, Project 2. They want to see the total cost for Department A across all its projects. Which Azure tool should they use?

A startup runs a web application on Azure virtual machines. The application experiences sudden, short-lived spikes in traffic multiple times a day. The startup configures an autoscale rule that adds two additional VM instances when CPU usage exceeds 75% and removes them when CPU drops below 30%. This approach is designed to match resource consumption closely to demand. Which cloud computing characteristic does this scenario primarily demonstrate?

A manufacturing company wants to process IoT sensor data locally at their factory floor to reduce latency before sending summarized data to the cloud. Which cloud computing concept does this represent?

What is Azure Active Directory (Azure AD)?

A global e-commerce platform runs on Azure App Service in multiple regions. They need to route user traffic to the nearest region based on geographic location, and also provide automatic failover if a region becomes unavailable. Which Azure service includes these capabilities with integrated Web Application Firewall (WAF)?

A retail company runs an e-commerce application on Azure virtual machines. Traffic follows a predictable daily pattern: peak load occurs from 9 AM to 5 PM on weekdays. To handle this, the company configures an Azure autoscale rule that adds virtual machines at 8:30 AM and removes them at 5:30 PM each weekday. This scenario best demonstrates which cloud computing characteristic?

Which Azure service provides a fully managed, cloud-based data integration service for creating data-driven workflows?

A company currently runs its application on-premises in a data center. The IT manager calculates that the cost per server per month is approximately $200 when considering hardware depreciation, electricity, cooling, and staff. The company is considering moving to Azure and discovers that Azure can provision the same server capacity for $150 per month, but only if the company commits to a three-year reservation. Which cloud concept best explains why Azure can offer a lower price even with the reservation commitment?

A company hosts a critical line-of-business application on Azure virtual machines. The application must remain available even if a single virtual machine fails due to hardware failure or operating system crash. The company deploys two virtual machines in an Availability Set and configures an Azure Load Balancer to distribute traffic. If one VM becomes unavailable, the Load Balancer automatically redirects traffic to the healthy VM. This configuration primarily demonstrates which benefit of cloud computing?

A company uses Azure Policy to enforce governance rules across its subscriptions. The governance team wants to ensure that every resource in the 'Production' subscription has a tag named 'Environment' with the value 'Production'. If a resource is created without this tag, or with a different value, the tag must be automatically corrected to 'Production' without blocking the creation of the resource. Which Azure Policy effect should the team configure?

A company uses Azure Policy to require that all storage accounts must have blob soft delete enabled. They also want to automatically create a remediation task that fixes any existing non-compliant storage accounts. Which policy effect should they include in the policy definition to achieve automatic remediation?

A company wants to migrate their on-premises SQL Server database to Azure with minimal changes to their existing application code. Which service offers the highest compatibility?

A company wants to host a static website (HTML, CSS, JavaScript) that is accessed by users worldwide. They need a low-cost solution that provides high availability and global reach without managing servers. Which Azure service is most cost-effective for this scenario?

A development team is building a proof-of-concept microservice that is packaged as a Docker container. They want to deploy it to Azure with the fastest provisioning time and the least operational overhead. The team does not need to manage virtual machines, orchestrate multiple containers, or configure scaling rules. Which Azure compute service should they use?

What is Microsoft's definition of 'cloud computing' as used in the context of Azure?

A company operates a global e-commerce API that serves customers worldwide. The development team needs a solution that provides the following capabilities: global load balancing across deployed instances in multiple Azure regions, web application firewall (WAF) protection against common exploits like SQL injection and cross-site scripting, TLS termination at the edge to reduce backend processing, and caching of static API responses to improve response times for repeated requests. The team wants a single Azure service that integrates all these features natively. Which Azure service should they use?

A company wants to organize their Azure subscriptions into a hierarchy to manage access policies and cost across different departments. They have three departments: Sales, Marketing, IT. What should they create first?

A company is migrating its on-premises SQL Server databases to Azure SQL Database, which is a Platform as a Service (PaaS) offering. The on-premises IT team is accustomed to manually applying monthly security patches to the SQL Server software. After the migration, the team wants to understand their responsibilities for securing the database. According to the shared responsibility model, which party is responsible for applying security patches to the SQL Server database engine in Azure SQL Database?

Which Azure feature provides a way to audit and track access to sensitive resources using detailed logs?

A company runs an Azure SQL Database that stores sensitive customer data. The security team mandates that all traffic to the database must remain entirely within the Microsoft Azure backbone network and never traverse the public internet. The database can only be accessed by a specific application running on virtual machines in a specific Azure virtual network. Which Azure feature should they configure to meet this requirement?

A developer needs to create a serverless API that executes code in response to HTTP requests without managing any server infrastructure. Which Azure service is BEST suited?

Which Azure feature provides an overview of the overall security posture across your Azure subscriptions with a secure score?

What does 'disaster recovery' mean in cloud computing, and how does Azure support it?

A company needs to run a custom-built Windows application that requires full administrative access to the operating system, including the ability to install custom software and configure firewall rules. They also need to ensure the application is highly available by running multiple instances. Which Azure compute service should they use?

What does 'compliance' mean in the context of Azure?

A company is migrating its on-premises infrastructure to Azure. In the past, to provision a new server, the IT team had to submit a formal request to the data center operations team. The operations team would then procure hardware, install the operating system, configure networking, and make the server available. This process often took several weeks. After migrating to Azure, a developer can log into the Azure portal, select a virtual machine configuration, and have it provisioned and running within minutes, without any need to interact with Azure support or operations staff. Which essential characteristic of cloud computing does this scenario best illustrate?

A company is moving from an on-premises data center to the cloud. Previously, they paid a large upfront sum for servers and storage, plus annual maintenance fees. Now they pay a monthly subscription based on the amount of compute and storage they actually use. This shift represents moving from which type of expenditure to which?

A retail company migrates its e-commerce platform to Azure Virtual Machines. The workload is seasonal, with high traffic during holiday sales and low traffic otherwise. To manage costs, the IT team configures Azure Automation to power off VMs during low-traffic periods and power them back on when demand increases. The company's monthly bill reflects charges only for the hours each VM was actually running; no charges are incurred for the time the VMs were in the 'Stopped (deallocated)' state. This consumption-based billing model is a direct example of which fundamental characteristic of cloud computing?

A company is designing a disaster recovery solution for a critical application. The solution must ensure that if an entire Azure region becomes unavailable due to a natural disaster, the application can fail over to a different region. The company wants to minimize latency between the primary and secondary regions for data replication. Which Azure feature should the company use?

A company wants to protect their application against a failure that affects an entire data center within an Azure region. Which feature should they use to distribute their VMs across multiple physical locations within that region?

Which Azure service acts as a reverse proxy with Web Application Firewall (WAF) capabilities to protect web applications from common web exploits?

Which Azure compute service lets you run containers without managing any virtual machine infrastructure, paying only for CPU and memory used while the container runs?

A manufacturing company is planning to move its on-premises infrastructure to Azure. The CFO wants to understand the financial impact. Currently, the company purchases servers and networking equipment upfront, which depreciates over three years. In Azure, they will pay only for the compute and storage resources they consume on a monthly basis. Which cloud concept best describes this shift in cost structure?

A company runs a critical transaction-processing application on Azure virtual machines in the East US region. The application writes data to Azure managed disks and also stores files in Azure Blob Storage. The company's disaster recovery policy requires that all storage data must survive a complete failure of an Azure availability zone within the same region without any data loss. The solution must use synchronous replication and must not replicate data to a different Azure region. Which Azure storage redundancy option should the company configure for the Blob Storage account?

A company has a single Azure subscription that contains resource groups for several business units. The company's compliance team wants to enforce a rule: no virtual network (VNet) can be deployed in any resource group unless the VNet is in a specific allowed region (West Europe). The rule must also block the creation of VNets in disallowed regions, but the team must be able to selectively exempt certain resource groups (e.g., for disaster recovery testing) without altering the underlying rule definition. Which Azure feature should the compliance team implement?

What is the purpose of Azure AD Identity Protection?

A company develops a data processing application that runs only when new files are uploaded to an Azure Blob Storage container. The application must scale automatically to handle hundreds of simultaneous file uploads and must not incur cost when no files are being processed. The development team wants the simplest solution that requires no infrastructure management. Which Azure compute service should they use?

Which Azure storage service is optimized for reading and writing large amounts of sequential data, commonly used for big data analytics?

Which Azure service provides a fully managed platform for running containerized microservices with built-in traffic splitting for blue-green and canary deployments?

What is the purpose of Azure Management Groups?

A company uses Azure Blob Storage to store backup files that must survive a complete regional outage. The company needs the data to be automatically accessible from a secondary region if the primary region becomes unavailable, without any manual failover. Which storage redundancy option should the company use?

A company runs a containerized application on Azure. They want to use Kubernetes for orchestration but do not want to manage the control plane nodes. They need a managed Kubernetes service. Which Azure service should they choose?

A company wants to run some applications in its own on-premises datacenter for compliance reasons, while also using cloud services for burst capacity and development/testing. Which cloud deployment model should they adopt?

A multinational bank operates a critical financial application that must remain available even if an entire Azure region experiences a prolonged outage. The bank's compliance team mandates that the disaster recovery data must reside in a separate geographic location that is at least 300 miles away from the primary region to reduce the risk of correlated failures. The solution must use Azure's built-in data replication feature without requiring manual pairing of regions. Which Azure feature meets these requirements?

What is Azure Cost Management's 'cost allocation' feature used for?

A development team lead needs to quickly provision a new Azure virtual machine for a short-term testing project. Instead of submitting a ticket to the IT procurement team and waiting several days for hardware approval and setup, the lead directly signs into the Azure portal, configures the VM settings, and has it running within 15 minutes. The entire process required no human interaction from the cloud provider's staff. Which cloud computing characteristic does this scenario primarily demonstrate?

Which Azure service provides a visual designer for building data transformation and movement pipelines between data stores?

A company has multiple departments, each with its own Azure subscription. They want to apply the same set of policies and role assignments to all subscriptions under the Sales department. They also plan to create more subscriptions for Sales in the future. Which Azure construct should they use?

Which Azure portal blade allows you to view all resources across your subscriptions in a single place?

A retail company runs its e-commerce platform on Azure App Service. The platform is configured with an autoscale rule that adds web server instances when CPU usage exceeds 75%. During a holiday flash sale, traffic surges from a baseline of 1,000 concurrent users to over 100,000 concurrent users within minutes. The platform automatically provisions additional instances to handle the load, and once the sale ends, it scales back down. This ability to rapidly adjust resources to meet varying demand is a direct example of which fundamental characteristic of cloud computing?

Which Azure feature enables you to create policy definitions, RBAC role assignments, and ARM templates as a single package and track their deployment relationship?

A company runs a customer-facing e-commerce platform on multiple Azure virtual machines behind a load balancer. The platform experiences unpredictable traffic spikes during promotions. The operations team needs a solution that automatically adds new virtual machines when CPU utilization exceeds 80% and removes virtual machines when utilization drops below 30%. The solution must also ensure that if a virtual machine fails, the load balancer immediately stops routing traffic to it. Which Azure compute service should the team use?

A company is designing a solution that requires guaranteed message delivery and exactly-once processing for financial transactions. Which Azure messaging service should they use?

A company wants to migrate a set of on-premises databases to Azure. They require high compatibility with SQL Server features, including cross-database queries and SQL Agent jobs. They want a PaaS solution. Which Azure service is most appropriate?

A company runs a seasonal e-commerce application. During holidays, traffic increases tenfold, but the company does not want to over-provision resources for the rest of the year. They want to add or remove server capacity automatically based on real-time demand and pay only for what they use. Which cloud computing characteristic does this scenario describe?

A global company wants to organize its Azure resources by department and project. They need to enforce cost allocation and apply governance policies consistently across all subscriptions. Which two Azure features should they use together? (Select two.)

A company wants to use a cloud service that provides a fully managed database, including automated backups, patching, and high availability, without managing any underlying servers. Which cloud service model is this?

A company uses Azure to host a web application. At the end of each month, the finance team receives an invoice that details charges for compute hours, storage consumption, and outbound data transfer. The IT manager explains that this granular billing is possible because Azure continuously monitors resource usage and provides detailed usage data for cost allocation. This capability is a direct example of which essential characteristic of cloud computing as defined by the National Institute of Standards and Technology (NIST)?

Which Azure service translates domain names to IP addresses for routing internet traffic?

What does 'geo-distribution' mean as a benefit of cloud computing?

Which Azure service provides managed hosting for Hadoop ecosystems including HDFS, Hive, HBase, and Spark?

Which Azure service provides source control, CI/CD pipelines, project management, and artifact management in a single platform?

Which Azure service allows you to run Linux and Windows virtual machines in the cloud with full control over the operating system?

Which Azure feature provides a way to define and enforce allowed resource configurations, like permitted VM sizes or storage redundancy types?

A company wants to proactively monitor and control its Azure spending. The finance team has set a monthly budget of $10,000 for the 'Marketing' subscription. They want to receive an email notification when the actual spending reaches 80% of the budget and another notification when it reaches 100%. Additionally, if the spending ever exceeds $12,000 in a month, they want to automatically trigger a runbook that scales down non-critical resources. Which Azure feature should the finance team use to achieve all these requirements?

A company wants to deploy a web application that automatically scales based on traffic, without managing any virtual machines. They need high availability and support for multiple development frameworks. Which Azure service should they use?

A company deploys an Azure SQL Database. The company is billed based on the amount of data stored and the number of transactions per second (DTUs). At the end of each month, the company receives an invoice that itemizes the exact usage and the corresponding charges. Which of the five essential characteristics of cloud computing does this billing model primarily demonstrate?

A company has multiple Azure subscriptions for different departments. The IT team wants to ensure that all resources in a specific subscription are only deployed in the 'West Europe' region. Which Azure feature should they use to enforce this restriction?

Which Azure service provides real-time performance monitoring and alerting for live web applications, including request rates and failure rates?

Which Azure service provides a DNS hosting service that resolves domain names using the Azure infrastructure?

A company is planning to migrate its on-premises applications to Azure. They have a mix of monolithic and microservices-based applications. Which Azure compute service should they choose for a microservices architecture that requires independent scaling and deployment of components?

A company wants to organize their Azure subscriptions into a hierarchy for policy and cost management. They have multiple departments, each with multiple subscriptions. What should they create first to establish this structure?

Which Azure service provides a hub for connecting IoT devices to Azure, supporting device management, telemetry ingestion, and bidirectional communication?

Which Azure feature provides continuous application performance monitoring with automatic anomaly detection?

In the shared responsibility model for cloud computing, which responsibility always remains with the customer regardless of the cloud service type?

A company hosts a public-facing e-commerce website on Azure virtual machines deployed in two Azure regions (East US and West Europe). The company wants to automatically route users to the region that provides the lowest network latency based on their geographic location. The solution must use DNS-based traffic routing and does not require terminating HTTP traffic at the load balancer. Which Azure service should the company use?

An organization needs to meet GDPR data residency requirements ensuring personal data of EU residents is stored only within the EU. How does Azure support this?

Which Azure storage feature enables you to recover previous versions of blob files that were accidentally deleted or overwritten?

A company is evaluating cloud deployment models. They need to keep sensitive data on-premises due to regulations but want to use Azure for development and testing workloads. Which cloud deployment model is most suitable?

A company wants to run a containerized application in Azure without managing the underlying virtual machines. Which Azure service should they use?

A company needs to grant a specific user the ability to restart virtual machines in a specific resource group, but not to create, delete, or modify them in any other way. The built-in 'Virtual Machine Contributor' role grants too many permissions. What is the most appropriate solution?

A company wants to track resource usage across departments and projects. They have multiple Azure subscriptions. They need to assign costs to specific departments based on resource usage. Which Azure feature enables them to view and analyze costs by resource tags?

A company runs a multi-tier application on Azure virtual machines in a virtual network. The web tier VMs are in a front-end subnet, and the database tier VMs are in a back-end subnet. Currently, outbound internet traffic from the VMs goes directly to the internet without any inspection or logging. The security team needs a centralized service to inspect all outbound traffic from the virtual network, log the destinations, and reject traffic to malicious domains based on threat intelligence feeds. The solution must also allow rules based on fully qualified domain names (FQDNs) instead of only IP addresses. Which Azure service should the security team deploy?

A company deploys a web application on Azure Virtual Machines across multiple availability zones within a single region. They need to distribute incoming network traffic across these VM instances to ensure high availability. Which Azure service should they use?

What is the role of a cloud 'service level objective' (SLO) versus a 'service level agreement' (SLA)?

A company deploys virtual machines in Azure. They want to ensure that the VMs are distributed across multiple fault domains and update domains within an Azure datacenter to protect against hardware failures and maintenance. Which Azure construct should they use?

A startup wants to migrate its application to Azure. The development team needs to be able to provision virtual machines and storage on demand without waiting for manual approval from a central IT team. Which characteristic of cloud computing directly fulfills this requirement?

Which cloud deployment model combines on-premises infrastructure with public cloud resources, allowing data and applications to be shared between them?

Which Azure service provides a fully managed, serverless data warehouse for enterprise analytics with massive parallel processing?

A company uses a public cloud provider that shares the same physical infrastructure among many customers. This allows the provider to offer lower prices due to economies of scale. Which cloud characteristic describes the sharing of infrastructure?

Which Azure service provides a low-code platform for building business applications and automating workflows?

A company's security team needs to audit all virtual machines (VMs) that have a public IP address directly attached, across more than 50 Azure subscriptions organized under several management groups. The team wants to run a single query to get a list of these VMs along with the subscription and resource group details. The solution must provide fast results without the need to write custom scripts or iterate through each subscription individually. Which Azure service should the team use?

A company wants to use cloud services to temporarily increase compute capacity for a promotional event, then reduce resources afterward. They want to pay only for the extra resources used during that event. Which cloud benefit does this scenario best describe?

A company wants to monitor the performance of their Azure VMs and receive alerts when CPU usage exceeds 90%. Which Azure service should they use?

A company uses Azure Policy to enforce that all virtual machines must have the Azure Monitor agent extension installed. The policy is assigned to a subscription and uses the 'DeployIfNotExists' effect, which automatically installs the agent on new VMs. However, the security team notices that several existing VMs are non-compliant because they were provisioned before the policy was assigned. The team wants to automatically make these existing VMs compliant without manual intervention. What should the team do?

A startup wants to use a cloud-based email service without installing any software on their own computers. They access the service through a web browser and the provider manages all updates and maintenance. Which cloud service model does this represent?

What is 'defense in depth' in cloud security?

What is the shared responsibility model in cloud computing?

What is 'serverless computing'?

Which of the following demonstrates how 'increased speed and agility' helps a development team in the cloud?

A company wants to host a web application that automatically scales based on traffic. Which Azure service is most appropriate for hosting this application without managing virtual machines?

A company uses Azure Policy to enforce governance. They want to prevent users from creating virtual machines of the Standard_DS3_v2 SKU in their subscription, and they also want to log any attempt to create such a VM (whether successful or not) for audit purposes. What is the minimum number of Azure Policy assignments required to meet both requirements?

What is Software as a Service (SaaS)?

What is Azure Policy's 'audit' effect used for?

A company is migrating a web application to Azure. The web tier will run on Azure App Service (PaaS) and the database tier will use Azure SQL Database (PaaS). The company's IT team wants to understand their patching responsibilities for the underlying operating system (OS) of each service. According to the shared responsibility model, which statement is correct?

A manufacturing company deploys a batch processing application on Azure. The processing workload is highly unpredictable; sometimes the application requires hundreds of virtual machines for a few hours to process a large queue of jobs, and at other times it requires only a handful of virtual machines. The company configures the application to automatically add and remove virtual machines based on the size of the processing queue, ensuring that they never pay for idle capacity. Which cloud characteristic does this scenario primarily demonstrate?

A company has a root management group containing three subscriptions: Production, Development, and Sandbox. The governance team assigns an Azure Policy initiative to the root management group that enforces tagging requirements. The Sandbox subscription is used for experimental testing and needs to be temporarily excluded from the tagging requirements while the team evaluates a new tagging schema. The team must ensure the policy assignment remains active in Production and Development but does not affect resources in Sandbox. Which Azure Policy feature should the team use?

Which Azure service provides enterprise-grade data integration and ETL/ELT pipelines for moving data between on-premises and cloud data stores?

A company has a regulatory requirement that all Azure resources must be deployed only in the West Europe region. The governance team needs to automatically prevent any user or application from creating resources in any other region. The team must also ensure that this restriction is applied to all existing and future subscriptions within the tenant. Which Azure service should the governance team use?

A company is considering moving its on-premises workloads to the cloud. They want to reduce their carbon footprint by using a cloud provider that uses renewable energy. Which cloud computing benefit is most directly related to this goal?

Which Azure service provides a way to deploy and manage Azure services at the edge, close to IoT devices and end users?

A company is deploying a mission-critical application on Azure virtual machines. The solution must remain operational even if a single Azure datacenter within a region experiences a complete outage. Which Azure feature should the company use to protect against this specific failure scenario?

A company has 30 Azure subscriptions organized under a single management group. The governance team wants to enforce that all resource groups must have a specific tag 'CostCenter' with a valid value. They create an Azure Policy definition with the 'Deny' effect and assign it to the root management group. However, the development team complains that they have a sandbox subscription where they need to create resource groups without the 'CostCenter' tag for testing. The governance team still wants the policy to apply to all other subscriptions but exempt the sandbox subscription. Which solution should the governance team use?

A company is developing a REST API that processes incoming HTTP requests. The API usage is highly unpredictable; sometimes it receives thousands of requests per minute, and at other times it receives zero requests for hours. The company wants to pay only for the compute time consumed when the API code is actually executing. They also want Microsoft to automatically handle scaling and maintenance of the underlying server infrastructure. Which Azure compute service should the company use?

Which Azure service helps migrate on-premises VMware, Hyper-V VMs, and physical servers to Azure?

A company deploys a multi-tier application using Azure virtual machines. The web tier VMs must be evenly distributed across two distinct data centers within an Azure region to avoid a single point of failure from an infrastructure outage. Which Azure construct should they use to meet this requirement?

Which Azure service provides fully managed, distributed in-memory caching for data like session state and frequently accessed database queries?

A company's IT manager is evaluating a public cloud provider. The provider's data center contains powerful physical servers that host virtual machines from thousands of different organizations. The manager is concerned about security, but the provider assures that each organization's VMs are logically isolated and cannot access each other's data, even though they share the same hardware. Which essential characteristic of cloud computing does this scenario best describe?

A multinational company uses Azure management groups to organize its subscriptions. The company has a root management group (tenant root group) containing three child management groups: 'Finance', 'HR', and 'IT'. Each child management group contains multiple subscriptions. The global governance team needs to enforce an Azure Policy that restricts all resource deployments across every subscription in the organization to only the 'West US' and 'East US' regions. The policy must automatically apply to any new subscriptions that are created under any management group in the future. The team wants to assign the policy once and have it affect all current and future subscriptions with minimal administrative overhead. At which Azure scope should the team assign the policy?

Which of the following correctly describes Azure's approach to pricing for data transfer?

Which Azure governance feature enables organizations to enforce that all virtual machines be tagged with a specific 'Owner' tag before deployment?

Which Azure service enables automated configuration management and desired state enforcement for Windows and Linux VMs?

What is Azure Resource Manager (ARM) template used for?

Which Azure feature enables governance teams to define standard, repeatable Azure environments for new projects?

A company is adopting a landing zone approach in Azure. The governance team wants to automatically provision a standardized environment for each new Azure subscription. The environment must include: a predefined set of Azure Policy assignments (e.g., enforce resource tagging), specific RBAC role assignments for a central operations team, and a baseline resource group containing a storage account with a specific configuration. The team wants to package all these components into a single, versioned object that can be assigned to a management group and updated over time as requirements change. Which Azure governance service should the team use?

Which Azure tool helps organizations evaluate and quantify the potential impact of Azure service disruptions on their operations?

Which Azure service monitors the health of Azure services and infrastructure in your region, and provides notifications about planned maintenance?

Which Azure region feature provides fault tolerance by isolating failures within a single region? It consists of physically separate datacenters with independent power, cooling, and networking.

In cloud computing, what does 'consumption-based pricing' mean?

A company has a team of support engineers who need to be able to restart Azure virtual machines when they become unresponsive. The support engineers must not be able to modify the VM configuration, delete the VMs, or access VM data. The company wants to use the principle of least privilege. No built-in Azure role meets these exact requirements. What should the company do?

A company historically purchased physical servers and networking equipment for its data center, paying the full cost upfront before using the hardware. The company is now migrating its workloads to Azure and will only pay for the compute and storage resources it consumes each month, with no long-term commitments or upfront hardware purchases. This financial model change best represents which cloud computing benefit?

A company runs a legacy application on-premises that must store data within the country due to regulatory requirements. To handle occasional peak workloads, the company connects its local network to an Azure virtual network via a site-to-site VPN. During these peaks, the application scales out to Azure virtual machines that process compute tasks but never store regulated data outside the on-premises datacenter. Which cloud deployment model does this scenario best describe?

A company wants to deploy a virtual machine in Azure and needs to ensure that the VM is placed in a location that provides the lowest network latency to its users in Europe. Which Azure construct should they consider to meet this requirement?

A company provides a software-as-a-service (SaaS) application to multiple enterprise customers. Each customer's usage of compute and storage resources is tracked separately. At the end of each month, the company generates detailed invoices that reflect each customer's exact resource consumption, including CPU hours, storage GB-months, and data transfer. The cloud provider automatically measures all resource usage and makes the data available through an API. Which essential characteristic of cloud computing does this scenario primarily demonstrate?

What is Azure DDoS Protection Standard?

A company has deployed multiple Azure virtual machines for a production workload. The IT administrator wants a centralized list of prioritized recommendations to improve the security, high availability, and cost efficiency of the virtual machines. The administrator also wants to be able to view the potential impact of implementing each recommendation. Which Azure service should the administrator use?

A company has a governance requirement that every Azure virtual machine must have a tag named 'CostCenter' with the value 'Unassigned'. If a user creates a VM without the tag, or with a different value for that tag, the tag should be automatically corrected to 'Unassigned' immediately upon resource creation. The IT team is writing an Azure Policy definition to enforce this. Which Policy effect should they use?

What does the term 'scalability' mean in the context of cloud computing?

A company has a policy that all Azure resources must have a 'CostCenter' tag. They want to automatically audit and deny the creation of any resource that does not include this tag. Which Azure Policy effect should they use?

Which Azure service provides distributed, low-latency access to large files (like game assets or software packages) for global users?

What does 'geo-distribution' mean in cloud computing?

A company uses Azure for its production workloads. The security team wants to receive proactive, personalized recommendations to improve the security of their Azure resources, such as enabling Microsoft Defender for Cloud on subscriptions that do not have it enabled. Which Azure service provides these security recommendations?

A developer wants to host a static website with HTML, CSS, and JavaScript files. Which Azure service is the MOST cost-effective option?

An application needs to store session state that can be accessed by multiple web server instances. The state must be retrieved in under 1 millisecond. Which Azure service BEST meets this requirement?

Match each Azure security service to its role.

Which Azure storage redundancy option replicates data synchronously across three availability zones within a single region?

Which aspect of Azure governance ensures that resources are protected from accidental or unauthorized deletion regardless of RBAC role?

Which Azure service provides a set of APIs and tools for building real-time communication features into applications, such as voice and video calling?

Which Azure tool provides personalized recommendations to optimize Azure resources for cost, security, reliability, performance, and operational excellence?

A company plans to use an infrastructure-as-code approach to deploy its Azure resources. The company wants to define all resources (virtual networks, virtual machines, storage accounts) in a declarative JSON file. This file must ensure that resources are created in the correct order, handle dependencies automatically, and allow the same configuration to be deployed to multiple environments (dev, test, production) with parameterized values. The solution should be a native Azure feature. Which Azure feature should the company use?

A company wants to enforce a governance policy that only allows virtual machines of the SKU 'Standard_DS2_v2' to be deployed in their Azure subscription. If a user attempts to create a virtual machine with a different SKU (e.g., 'Standard_D2s_v3'), the deployment must be immediately rejected with an error, and the resource must not be created. Which Azure Policy effect should the team use to implement this requirement?

Which Azure service provides a content delivery network (CDN) that caches static content at edge locations worldwide to reduce latency for users?

Which Azure service provides a way to enforce organizational standards and assess compliance at scale across Azure resources?

A company manages multiple Azure subscriptions for development, testing, and production environments. The governance team needs to ensure that every new subscription automatically includes a consistent baseline consisting of Azure Policy definitions, role assignments, and a predefined resource group structure. The team wants to package these governance components into a single deployable artifact that can be applied to any subscription with minimal manual effort. Which Azure feature should the team use?

A company's finance team needs to track Azure costs by project. Each resource is tagged with a 'Project' tag, but some resources were created without tags. The finance team wants to generate a report that shows costs grouped by project and also identifies untagged resources. Which Azure tool should they use?

Which Azure compute service runs identical VM instances in multiple Availability Zones with automatic load balancing?

A manufacturing company is building a web-based dashboard to display real-time production metrics from sensors. The development team wants to deploy the application without managing the underlying infrastructure, including the web server and operating system. The application uses ASP.NET Core. Which Azure service should they use?

What does the Azure 'Reliability' pillar of the Well-Architected Framework focus on?

Which Azure service provides code repository hosting with features like pull requests, code review, and branch protection?

An organization needs to ensure all VMs in Azure use approved VM sizes only. Which Azure feature enforces this?

A company needs to store massive amounts of unstructured data, such as videos and images, that will be accessed over the internet. The data must be highly durable and available. Which Azure service should they use?

Which Azure service allows you to create a private network connection between your Azure VNet and your on-premises network using a dedicated circuit, not over the public internet?

A company stores sensitive customer data in an Azure Blob Storage account. The company's security policy requires that all data traffic between the virtual network (VNet) and the storage account must never traverse the public internet. Additionally, the storage account must remain accessible from an on-premises data center through a Site-to-Site VPN connection. Which Azure feature should the company configure on the storage account?

A company has multiple Azure subscriptions for different departments. They want to enforce consistent policies across all subscriptions regarding allowed virtual machine sizes and require compliance reporting. Which Azure feature should they use?

Which statement correctly describes the relationship between cloud scalability and business continuity?

What is the purpose of Azure tags?

A company wants to run a containerized microservices application on Azure. The application requires automatic scaling, service discovery, and rolling updates without manual intervention. They prefer not to manage the underlying virtual machines. Which Azure compute service should they choose?

Which Azure service provides a way to build workflows that integrate apps, data, and services across cloud and on-premises environments?

A company hosts a web application on Azure App Service. The application must be accessible from any internet-connected device, including smartphones and laptops. Employees also use the Azure portal and Azure CLI from various locations to manage the application and other Azure resources. This scenario best illustrates which characteristic of cloud computing?

Which Azure identity service provides single sign-on (SSO) and multi-factor authentication (MFA) for cloud and on-premises applications?

What is the purpose of Azure Load Balancer?

What is the primary difference between CapEx (Capital Expenditure) and OpEx (Operational Expenditure) in the context of IT spending?

Which Azure service provides NoSQL wide-column database storage compatible with Apache Cassandra?

A company is evaluating cloud service models. They need to migrate an existing application that requires full control over the operating system and custom software installations. They do not want to manage the underlying physical hardware. Which cloud service model best fits this requirement?

A company has two on-premises data centers connected to each other via a high-speed MPLS link. They plan to migrate several critical workloads to Azure. The network team requires a dedicated, private connection from each on-premises site to Azure that does not traverse the public internet. The connection must provide high bandwidth, low latency, and a Service Level Agreement (SLA) for availability. Which Azure service should the network team provision to meet these requirements?

A company uses Azure Management Groups to organize subscriptions. The hierarchy is: Root Management Group -> Contoso Management Group -> Sales (management group) and R&D (management group). Under Sales there are two subscriptions: Sales-Prod and Sales-Dev. Under R&D there is one subscription: R&D-Prod. The governance team assigns an Azure Policy definition that denies the creation of resources in the East US region. They assign this policy to the Contoso Management Group, but they add an exclusion for the Sales-Dev subscription. A developer in the Sales-Dev subscription attempts to create a virtual machine in the East US region. What will happen?

Which Azure feature allows you to organize resources into logical groups for billing, management, and access control purposes?

Which Azure service provides a managed Apache Kafka-compatible event streaming service for high-throughput data pipelines?

A multinational e-commerce company runs its customer-facing web application on Azure virtual machines deployed in two Azure regions: East US and West Europe. The company wants to automatically route user traffic to the nearest regional deployment based on the user's geographic location. Additionally, if one region becomes unavailable, all traffic should automatically be redirected to the remaining healthy region. The company wants a solution that works at the DNS level and does not require terminating HTTPS traffic at the routing layer. Which Azure service should they use?

A company runs a latency-sensitive application on Azure virtual machines and needs to connect its on-premises data center to Azure. The connection must offer high reliability, predictable performance, and a service-level agreement (SLA) from the connectivity provider. It must also bypass the public internet for security and performance reasons. Which Azure service should the company use?

A company operates a fleet of on-premises servers running legacy applications. Due to strict regulatory compliance requirements, these servers cannot be migrated to Azure. However, the IT team wants to centrally manage these servers using Azure tools, including applying Azure Policy to enforce configuration standards and using Azure Monitor for log collection and performance monitoring. The team needs to treat these on-premises servers as Azure resources without moving them. Which Azure service should the company use?

A small business wants to run its accounting application without managing the underlying operating systems or hardware. The application is accessed through a web browser. Which cloud service model is being used?

Match each Azure support plan to its key feature.

A global company is designing a disaster recovery solution for a critical application. They plan to deploy the application to two Azure regions. The company wants to minimize the risk of both regions failing simultaneously due to a major platform update or a widespread natural disaster. Which Azure feature provides a specific pairing of regions to meet this goal?

A company wants to ensure that all Azure resources they deploy are created in the Europe West region to comply with data sovereignty requirements. They want to block creation of resources in any other region. Which Azure service should they use?

A company wants to enforce that all storage accounts use the 'Standard' performance tier and block creation of any 'Premium' storage accounts. Which Azure Policy effect could achieve this?

A company needs to protect their Azure VMs from DDoS attacks at the network layer. Which Azure service provides this protection?

Which Azure service provides compliance documentation, audit reports, and regulatory certifications to help organizations meet their own compliance obligations?

A team uses Docker containers to run microservices. They need a service that automatically manages the cluster, scales containers based on demand, and provides load balancing without requiring them to manage the underlying VMs. Which Azure compute service should they choose?

When using Azure, a company wants to calculate the composite SLA for two services used together where both must be available. Service A has a 99.9% SLA and Service B has a 99.95% SLA. What is the composite SLA?

Which Azure feature allows you to prevent accidental deletion or modification of critical Azure resources?

A global e-commerce company has web applications deployed on Azure virtual machines in the West US and West Europe regions. The company needs a single, global HTTP-based entry point that can perform SSL offloading, route requests based on the URL path (e.g., /api to one backend pool, /images to another), and provide a web application firewall (WAF) to protect against common web attacks. Additionally, the solution must automatically direct users to the closest regional deployment to minimize latency. Which Azure service should the company use?

A company plans to deploy two Azure virtual machines that host a critical web application. Both VMs will be in the same Azure region and the same virtual network. The company’s requirements are: 1) During Azure platform-initiated maintenance (e.g., OS updates), at least one VM must remain running. 2) If a hardware failure occurs in the server rack that hosts one VM, the other VM must not be affected. 3) The solution must not incur additional costs beyond the VMs themselves. Which Azure feature should the company configure?

Which Azure storage redundancy option stores three copies of data within a single data center in a single region?

A retail company is planning to migrate its e-commerce application to Azure. The application will run on an Azure virtual machine that the company will manage. The IT manager wants to ensure that security patches are applied promptly. According to the shared responsibility model, who is responsible for applying security updates to the guest operating system of the Azure virtual machine?

A company decides to move its email to Microsoft 365. What cloud service model is this an example of?

A company has an Azure subscription with multiple resource groups. The governance team wants to ensure that every new resource created in the subscription automatically receives a 'Department' tag with a default value of 'Finance' if the creator did not specify one. The team wants the tag to be applied without blocking the creation of the resource. Which Azure feature should they use?

Which Azure service provides a managed Apache Hadoop cluster for processing large amounts of data using batch analytics?

A company is deploying a web application in Azure. The application consists of an Azure App Service, an Azure SQL Database, and a Storage account. The development team maintains three separate environments: development, test, and production. The team wants to be able to delete all resources associated with a specific environment (e.g., development) in a single action, without affecting the other environments. The solution must also allow applying role-based access control (RBAC) and tags consistently to all resources within each environment. Which Azure component should the team use to achieve these requirements?

A company has a critical Azure Storage account that stores immutable backups. The IT administrator wants to ensure that no one can delete or modify this storage account, even administrators with Contributor or Owner roles. The company still needs to allow read access to the data within the storage account. Which Azure governance feature should the administrator implement?

A company has a policy that all Azure Storage accounts must have diagnostic settings enabled to send logs and metrics to a specific Log Analytics workspace. The governance team wants to automatically configure these diagnostic settings when a new storage account is created, without blocking the initial creation. The solution must not require manual intervention. Which Azure Policy effect should the team use in their policy definition?

A company needs to grant a group of users the ability to restart and start/stop virtual machines, but not to create or delete them. They want to assign this permission at the resource group level. What should they do?

A company has deployed a critical production application in an Azure resource group. The security team wants to prevent accidental deletion or modification of any resources within that resource group. They have already configured Azure RBAC roles to grant only necessary permissions to the operations team. However, they need an additional protection that even users with Owner permissions cannot delete the resource group or its resources without a two-step process to remove the protection. Which Azure feature should the company implement?

A company runs a critical application on multiple Azure virtual machines (VMs) in the East US region. The application requires that the VMs are physically separated from any other customer's workloads and that the underlying physical servers are dedicated to this company alone. The compliance team mandates that no other customer's VMs can run on the same physical hardware. Which Azure compute offering should the company use to meet this requirement?

A company runs a critical ERP system on-premises and plans to extend the application to Azure IaaS VMs for burst capacity. The network team requires a dedicated, private connection between the on-premises data center and Azure that does not traverse the public internet. The connection must offer consistent latency, high bandwidth options up to 10 Gbps, and a financially backed SLA for availability. Which Azure service should the team provision to meet these requirements?

Which Azure governance concept ensures that access to resources is granted only to users who need it for their job function?

A company has an Azure subscription with hundreds of existing virtual machines. The governance team wants to enforce a policy that every virtual machine must have a tag named 'CostCenter' with a valid value. The team wants to automatically add the 'CostCenter' tag with a default value of 'Undefined' to any existing or new virtual machine that is missing the tag. They do not want to block the creation of virtual machines that are missing the tag, but they do want the tag to be added automatically within a few minutes of detection. Which Azure Policy effect should the team use?

A company wants to segregate their Azure resources into logical groups based on department and environment. They also want to apply access control and management at these group levels. Which Azure construct should they use?

What does the term 'fault tolerance' mean in cloud computing?

A startup wants to use cloud services to launch their product quickly without investing in hardware. Which cloud benefit does this BEST describe?

Which Azure tool provides an interactive, browser-based command-line experience that is authenticated and pre-configured for Azure management?

Which of the following best describes the 'shared responsibility' for operating system updates under the IaaS model?

What benefit does Azure provide that specifically helps companies maintain business continuity when their primary location is unavailable?

What is 'scalability' in the context of cloud computing?

What is the Azure portal?

A company has an Azure Policy assignment that denies the creation of any virtual machine (VM) that does not have a mandatory 'CostCenter' tag. A development team needs to deploy a temporary test VM without the required tag for a short-term experiment. The governance team wants to allow this specific exception while recording the reason for the exception, ensuring the policy is still enforced for all other resources. The exception must also automatically expire after 30 days. Which Azure Policy feature should the governance team use?

A company is developing a new web application. The development team wants to deploy the application code without having to manage the underlying virtual machines, operating systems, or runtime environments. They only want to focus on writing code and let the cloud provider handle the infrastructure, platform, and scaling automatically. Which cloud service model does this scenario describe?

A financial services firm uses a hybrid cloud strategy. They run customer-facing applications in a public cloud and store sensitive customer data in an on-premises data center to meet regulatory compliance. The firm wants to allow its applications in the public cloud to securely access the on-premises data when needed. Which cloud deployment model best describes this setup?

What is an Azure availability zone?

Which Azure feature creates an audit trail showing who performed what actions on Azure resources and when?

Which Azure service provides dedicated physical servers for regulatory or licensing requirements where hardware cannot be shared with other customers?

An organization wants to track which team or project each Azure resource belongs to for cost allocation purposes. Which Azure feature is BEST for this?

Which Azure service allows you to extend your on-premises Active Directory to the cloud for hybrid identity scenarios?

Which Azure database service is specifically optimized for running open-source MariaDB workloads as a fully managed service?

A company has multiple Azure subscriptions used by different departments. The security team wants to enforce a requirement that all Azure Storage accounts in every subscription must be encrypted at rest using customer-managed keys (CMK). The solution must automatically evaluate existing and new storage accounts for compliance, and it must be able to automatically remediate non-compliant resources by enabling CMK encryption. The team wants to use a single, centralized Azure feature that can be assigned once and apply to all subscriptions. Which Azure feature should they use?

A company is designing a multi-tier application on Azure. The web tier needs to scale out based on CPU usage, while the database tier requires high-performance storage for transactional data. Which combination of Azure services should they choose?

What does 'reliability' mean as a cloud benefit?

A company is migrating a legacy customer relationship management (CRM) application to Azure infrastructure as a service (IaaS). The application runs on Windows Server and uses a third-party database. The company's IT team will manage the application and database software. However, they want to minimize their operational overhead for tasks that Azure can handle automatically. According to the shared responsibility model, which of the following tasks is the responsibility of Microsoft?

A small business runs its IT infrastructure in a small on-premises server room. The business owner is considering moving to Azure and asks the IT manager: 'How can a large cloud provider like Microsoft offer compute and storage at a lower per-unit cost than I can get by purchasing my own servers, even though I only need a few virtual machines?' Which cloud computing benefit best answers this question?

What is the purpose of Azure's 'Cost Management + Billing' service?

Which Azure service provides a platform for analyzing and visualizing large amounts of data stored in Azure Data Lake or Azure Blob Storage?

A rapidly growing e-commerce company currently hosts its website on a single server in a US data center. Customers in Europe and Asia report slow load times and timeouts. The company wants to improve performance for global users without building and managing data centers worldwide. They plan to deploy the website on Azure virtual machines in multiple Azure regions (e.g., West Europe, Southeast Asia) and use Azure Traffic Manager to route users to the closest region. Which benefit of cloud computing does this approach primarily demonstrate?

What is the relationship between an Azure tenant, a subscription, and a resource group?

Which Azure service provides a managed Kubernetes environment for deploying and managing containerized applications?

A company wants to move their on-premises data center to Azure to take advantage of the ability to quickly provision new environments for development and testing on demand, reducing time-to-market. Which cloud benefit is this an example of?

Which Azure service enables the creation of event-driven architectures by reacting to state changes in Azure resources?

A company manages 50 Azure subscriptions that contain thousands of resources. The DevOps team needs to identify all virtual machines that are tagged with 'Environment: Production' across all subscriptions. They need a single query that returns the VM name, resource group, and location for every such VM. The team does not want to write PowerShell commands or loop through each subscription manually. Which Azure service should they use?

What is the purpose of Azure Service Health?

A company wants to view a consolidated list of all Azure resources across multiple subscriptions and query them using Kusto Query Language (KQL). Which Azure tool should they use?

What is Azure Role-Based Access Control (RBAC)?

A startup application experiences unpredictable traffic spikes. The application runs on Azure Virtual Machines. They want the VMs to automatically increase in number during peak times and decrease during low usage, without manual intervention. Which cloud characteristic does this requirement describe?

A company plans to deploy a critical application across multiple physical locations within a single Azure region to ensure that if one datacenter fails, the application remains available. Which Azure feature should they use to distribute virtual machines across these locations?

A healthcare organization stores patient records in Azure Blob Storage. They require that data remains available even if an entire Azure datacenter fails, and they also need to ensure data is replicated within the same region for low latency. Which storage redundancy option should they choose?

A global retail company hosts its e-commerce web application on Azure virtual machines in three Azure regions: West Europe, East US, and Southeast Asia. The application must provide a single HTTPS entry point for customers worldwide. The company requires the solution to: route each user to the region that provides the best performance (lowest latency), automatically redirect traffic to a healthy region if one becomes unavailable, and protect the application from common web vulnerabilities such as SQL injection and cross-site scripting (XSS) by inspecting all incoming HTTP/HTTPS traffic at the edge. Which Azure service should the company use?

Match each Azure database service to its type.

Which Azure networking service allows applications to send notifications to iOS, Android, and Windows devices with a single API call?

A company runs a web application on Azure App Service. They want to route users to the nearest regional deployment based on DNS queries to minimize latency. Which Azure service should they use for this global traffic routing?

Which Azure storage tier should you use for data that is stored for at least 180 days and is rarely accessed?

A company wants to be able to increase and decrease resources automatically based on demand without manual intervention. Which cloud characteristic does this describe?

A company has deployed several Azure virtual machines in a VNet. The security policy requires that no VM has a public IP address. However, administrators need to connect to the VMs using RDP and SSH for management. The administrators currently use the Azure portal and must not install any additional client software on their local workstations. Which Azure service should they use to meet these requirements?

Which Azure service provides automatic threat detection and response for Azure SQL Database, detecting anomalous activities like SQL injection?

Match each Azure governance tool to its purpose.

A company wants to enforce a set of security policies across all their Azure subscriptions. They have created several individual policy definitions. Which Azure construct should they use to group these policies together and assign them as a single package?

A financial services company processes sensitive customer data and must strictly control the physical location of the servers. They want to use cloud computing but with dedicated hardware that is not shared with other customers. Which cloud deployment model should they choose?

A company runs a web application that experiences sudden spikes in traffic during promotional events. They want to automatically add more virtual machines during high demand and remove them when traffic subsides, paying only for the resources used. Which cloud computing benefit does this scenario describe?

A startup has unpredictable traffic — sometimes thousands of users, sometimes almost none. Which pricing model best fits their needs?

A global organization wants to apply a consistent set of Azure policies and RBAC roles across all new subscriptions automatically as they are created. Which Azure capability enables this?

A company uses Azure Policy to require encryption on storage accounts. They want to automatically deploy an encryption extension to any new storage account that does not have it enabled, without manual intervention. Which policy effect should they use?

A company uses Azure and wants to organize all their virtual machines, databases, and storage accounts into logical containers for management and billing purposes. Which Azure component should they use to group these resources?

A large enterprise manages hundreds of Azure subscriptions. The compliance team needs to run an on-demand report that shows all virtual machines with their current power state (running or deallocated), operating system, and VM size, filtering by specific resource groups or subscriptions. The team wants to use a native Azure tool that allows querying Azure resources at scale using a Kusto Query Language (KQL) syntax. Which Azure service should they use?

Which Azure service provides a managed platform for deploying and running microservices as containers without managing the Kubernetes control plane?

A company transitions from on-premises IT, where they purchased servers upfront, to Azure, where they pay a monthly subscription for virtual machines. This is an example of moving from capital expenditure (CapEx) to which type of expenditure?

A company uses Azure to host a web application. The finance team reviews the monthly invoice and notices that the charges are based on the exact number of hours each virtual machine was running, the amount of storage consumed, and the volume of data transferred out of Azure. They did not pay a fixed upfront cost. Which cloud computing characteristic does this billing model best illustrate?

Which Azure service allows you to create managed file shares in the cloud that are accessible via the SMB protocol?

A company has multiple Azure subscriptions for different departments. They want to track and analyze costs, and allocate costs to each department based on tags applied to resources. Which Azure tool should they use?

A company runs a critical line-of-business application on a single on-premises server. The company is migrating the application to Azure and wants to minimize downtime if the server hardware fails. The architect proposes deploying the application on two Azure virtual machines (VMs) in the same region, placed in an availability set. This configuration is designed to ensure that if one VM fails due to hardware failure or planned maintenance, the other VM remains running and the application stays available. Which cloud computing concept does this configuration primarily illustrate?

A company is moving from an on-premises data center to Azure. They previously had to purchase servers, networking gear, and software licenses as upfront capital expenses. In Azure, they pay a monthly fee based on actual usage. Which cloud benefit does this represent?

Arrange the steps to create a virtual machine in Azure in the correct order.

A company deploys a critical application across two Azure regions for disaster recovery. They want to automatically failover traffic to the secondary region if the primary becomes unavailable. They also want to improve performance by routing users to the closest region. Which Azure service should they use?

A company is deploying a critical internal application in Azure. The application will run on two virtual machines. The solution must guarantee that the virtual machines are placed on separate physical servers and separate racks to minimize the impact of hardware failures. Which Azure feature should the company use?

A retail company runs an e-commerce website on Azure. The website experiences highly unpredictable traffic with occasional sudden spikes (e.g., during flash sales). Outside of sales events, the website has low traffic. The company wants to automatically increase the number of virtual machines during peak demand and automatically reduce them when demand subsides, without any manual intervention. The primary goal is to handle variable demand efficiently while minimizing cost. Which cloud computing characteristic best describes this capability?

Which Azure AI service can analyze images and return information about people, objects, brands, and text within those images?

A company operates a hybrid IT environment with virtual machines running on-premises and in Amazon Web Services (AWS). The company also has a growing number of resources in Microsoft Azure. To simplify management, the company wants to use a single Azure service to apply Azure Policy definitions and enable unified inventory and tagging across all virtual machines, regardless of their location. Which Azure service should the company use?

A healthcare organization needs to enforce a set of compliance requirements (e.g., enable encryption on all storage accounts, restrict public network access to SQL databases, and enforce a specific TLS version) across all Azure subscriptions. The organization has defined these requirements as individual Azure Policy definitions. The governance team wants to assign all these policies together as a single unit to a management group, ensuring that any new subscription created under that group automatically receives all the policies. Which Azure object should the governance team create first?

A company wants to migrate an on-premises SQL Server database to Azure. They require full administrative control over the database engine, including the ability to configure SQL Server Agent jobs and use cross-database queries. They also want to avoid patching the operating system. Which Azure service should they choose?

A company migrates its web application to Azure App Service (Platform as a Service). The application processes sensitive customer data and must ensure that all data in memory is encrypted while the application is running. According to the shared responsibility model, which party is responsible for implementing encryption of data in memory for this application?

A company uses a hybrid cloud model where some workloads run on-premises and some in Azure. They need a consistent identity management system across both environments, allowing single sign-on for users accessing resources in either location. What should they implement?

A small business wants to move its accounting software to the cloud to avoid purchasing and maintaining physical servers. Which cloud service model would provide the accounting application as a ready-to-use service over the internet?

A company is evaluating cloud providers and needs to ensure that their data remains within a specific geographic boundary due to data sovereignty laws. Which cloud concept is most directly related to this requirement?

A company uses Azure to run a virtual machine for development. They want to ensure that if the physical server hosting the VM fails, the VM is automatically restarted on another server within the same Azure datacenter. Which Azure SLA does this scenario relate to?

A company has multiple Azure subscriptions for different development teams. They need to define a repeatable environment that includes a set of Azure policies, role assignments, and resource templates that must be applied to any new subscription created for a project. Which Azure service should they use?

A company has two Azure virtual networks: VNet-A in the East US region and VNet-B in the West US region. Each VNet hosts a set of virtual machines that run a distributed application. The application requires private, low-latency communication between the VMs in VNet-A and VNet-B. The company wants to minimize operational complexity and avoid any additional billing for data transfer between the two VNets beyond the standard Azure data transfer charges. Which Azure service should the company use to connect the two virtual networks?

A company has created an Azure Blueprint to define a standard environment with role assignments and policies. They have published multiple versions. They want all existing subscriptions that were created from an older version to automatically receive the updates from the latest version. What should they do?

Which type of cloud deployment model uses a combination of on-premises infrastructure and public cloud services?

A company uses multiple Azure subscriptions for different departments. The finance team wants to monitor spending across all subscriptions and receive automated email alerts when a subscription's actual spending reaches 80% of its monthly budget. The team does not want to write custom scripts or use external tools. Which Azure feature should they use?

A company develops a web API that runs on Azure App Service. The development team wants to deploy a new version of the API to a staging environment, run integration tests against it, and then gradually shift production traffic to the new version. If any issues are detected, they want to immediately roll back to the previous version without redeploying. Which Azure App Service feature should the team use to meet these requirements?

A company uses Azure for its infrastructure. A developer needs a new virtual machine to test a feature. The developer goes to the Azure portal, selects an image, and provisions the VM within minutes without any interaction with the IT procurement department. This capability directly demonstrates which essential characteristic of cloud computing as defined by NIST?

A company wants to ensure that whenever a new Azure subscription is created, it automatically inherits a set of baseline policies, role assignments, and resource groups. Which Azure tool should they use to package and deploy these governance components consistently?

A company plans to migrate a legacy application to Azure virtual machines. The application requires a shared file store that can be mounted simultaneously from multiple VMs using the Server Message Block (SMB) protocol. The company needs a fully managed cloud file share that supports SMB 3.0 and integrates with Active Directory Domain Services for authentication. Which Azure service should the company use?

A company needs a globally distributed, multi-master database that guarantees less than 10 milliseconds latency for reads and writes regardless of geographic location. Which Azure service should they use?

Which Azure service provides a flexible, highly available LDAP (Lightweight Directory Access Protocol) and Kerberos service without managing domain controllers?

Which Azure service provides a fully managed message broker that supports queues and publish-subscribe topics for enterprise application integration?

What is the Azure concept of 'regions' and why do they matter for applications?

Which Azure storage service provides a hierarchical namespace and is optimized for big data analytics workloads?

A multinational corporation wants to deploy a standard set of Azure resources—including virtual networks, virtual machines, and SQL databases—to multiple departments. Each deployment must automatically include assigned Azure Policy definitions to enforce security rules, role-based access control (RBAC) assignments for the operations team, and a predefined naming convention. The solution must provide a single, repeatable package that can be versioned and updated centrally. Which Azure service should the company use?

A company has a policy that all Azure resources must have an 'Owner' tag. They want to automatically add the 'Owner' tag with a value 'Default' to any resource created without it. Which Azure Policy effect should they use?

A company wants to run a containerized application quickly without managing any virtual machines or orchestration infrastructure. They just need to start a container and have it run. Which Azure service is best suited for this?

A company needs to deploy a consistent set of Azure resources (a virtual network, two subnets, and a network security group) into multiple environments: dev, test, and prod. The IT operations team wants to define these resources in a declarative file that can be deployed repeatedly and reliably to different resource groups. The team also wants to version control the file and have the ability to update all environments by redeploying the same file. Which Azure feature should the team use?

What is the purpose of the Azure portal?

Which Azure service provides automated build, test, and deployment pipelines for applications using a fully managed service?

Which Azure service provides recommendations for improving the security posture of your Azure SQL databases?

A company wants to increase the number of virtual machines it uses during peak hours and decrease them during off-peak hours without manual intervention. Which characteristic of cloud computing does this represent?

A company deploys a mission-critical application across three Azure availability zones. The application is designed to continue operating without any interruption if an entire availability zone becomes unavailable. Which cloud computing characteristic does this scenario best illustrate?

A hospital stores patient data in the cloud. They are concerned about physical security at the datacenter. Which aspect of the shared responsibility model describes the cloud provider's obligation to secure the physical infrastructure?

Which Azure service enables language understanding by recognizing intents and entities from natural language text?

A company wants to deploy a custom Linux-based application in Azure. They need full control over the operating system, including installing custom software and configuration. Which Azure compute service should they choose?

Which Azure feature automatically identifies cost savings opportunities like orphaned resources and idle VMs?

A company has resources across multiple Azure subscriptions and needs a single dashboard to view cost data across all of them. Which Azure service provides this?

Which Azure monitoring capability sends automated alerts when resource metrics exceed defined thresholds?

A company is migrating a custom-built inventory management application to the cloud. The application runs on a specific version of Windows Server and requires custom registry settings that are not supported in a platform as a service (PaaS) offering. The company wants to avoid the overhead of managing physical servers but still needs full control over the operating system and application dependencies. Which cloud service model should the company use?

A retail company runs an e-commerce application on Azure. During the holiday season, the application experiences a sudden 10x increase in traffic. The company uses Azure Virtual Machine Scale Sets configured with autoscale rules based on CPU usage. The application automatically adds virtual machines during the peak and removes them when traffic subsides. Which benefit of cloud computing does this configuration primarily demonstrate?

Which Azure service provides a virtual machine image repository for sharing custom VM images across an organization?

A large enterprise manages multiple Azure subscriptions for different business units. The central governance team wants to deploy a consistent landing zone across all subscriptions. The landing zone must include pre-defined Azure Policy definitions (e.g., allowed locations, allowed VM SKUs), standard RBAC role assignments (e.g., Owner, Contributor for specific security groups), and a predefined resource group structure (e.g., 'Networking', 'Security', 'Workloads'). The team wants a single, versioned artifact that can be assigned to any subscription to apply all these configurations together, with the ability to update the artifact and have changes propagate to existing assignments. Which Azure service should the team use?

Which Azure feature can be used to prevent Azure resources in a subscription from being moved to a different resource group?

A company has multiple on-premises file servers that store user home directories and department shares. The company wants to migrate these file shares to Azure Files to eliminate on-premises server maintenance. However, users frequently access large files, and the company wants to cache the most frequently accessed files locally on a small Windows Server machine at each branch office to minimize latency and bandwidth usage. The company also wants a single unified namespace so users can access files using the same path regardless of whether the files are cached locally or stored in Azure. Which Azure service should the company use?

A startup wants to quickly deploy a web application without worrying about server maintenance. They only want to focus on writing code and deploying it. Which cloud service model best fits this requirement?

Which Azure tool provides a unified command-line experience for managing Azure resources across Windows, macOS, and Linux?

An organization wants to review the compliance status of all resources across multiple subscriptions against a set of regulatory standards. Which Azure tool provides this consolidated view?

A company stores critical configuration data in an Azure Storage account. The IT administrator wants to prevent accidental deletion of this storage account. However, the administrator must still be able to read and update the data within the storage account. The company uses Azure Role-Based Access Control (RBAC) to manage permissions. Which Azure governance feature should the administrator implement to achieve this goal?

Which Azure service provides a relational database compatible with open-source MySQL?

What is the primary benefit of high availability in cloud computing?

A company is deploying a mission-critical application that must remain available even if a physical Azure datacenter within a region fails. The application will run on multiple virtual machines. Which Azure feature should they use to protect against this specific failure scenario?

Which Azure service provides a dedicated, hardware-isolated physical server for hosting virtual machines to meet compliance and licensing requirements?

Which Azure feature allows an organization to identify resources that do not comply with defined policies and automatically trigger remediation?

What is the main benefit of cloud computing's 'economies of scale' for customers?

A company wants to set monthly spending limits for each department and receive alert emails when spending reaches 80% of the budget. Which Azure tool should they use?

A company wants to enforce a naming convention for all Azure resources. For example, all resources must start with 'Contoso-'. They want to automatically audit and deny creation of resources that do not follow the naming convention. Which Azure Policy effect should they use?

A company is designing a highly available application deployment in Azure. The solution must ensure that virtual machines are placed in physically separate data centers within the same Azure region to protect against a single data center failure. Which Azure feature should the company use?

A company deploys a critical application on Azure virtual machines. They want to ensure that the VMs are distributed across physically separate datacenters within a single Azure region to protect against a single datacenter failure. Which Azure feature should they use?

A company runs a large data analytics job for a few hours each week. They want to use Azure virtual machines with the lowest possible cost, accepting that the VMs may be reclaimed by Azure at any time. Which pricing option should they choose?

An international e-commerce company has deployed its web application in two Azure regions to serve customers globally. The solution must automatically route users to the region with the lowest latency, provide high availability with automatic failover if one region becomes unavailable, and protect the application from common web exploits such as SQL injection and cross-site scripting at the edge. Which Azure service should the company use?

A company runs its production workloads on an on-premises data center to meet strict regulatory compliance requirements. However, the development and testing teams use Azure to quickly provision environments on demand for short-term projects. The teams need to occasionally transfer data between the on-premises environment and Azure. Which cloud deployment model does this setup represent?

What is the difference between 'high availability' and 'fault tolerance' in cloud computing?

A company runs a web application on a set of Azure virtual machines. The application experiences unpredictable spikes in user traffic. The company configures an Azure Virtual Machine Scale Set with an autoscale rule that adds virtual machines when CPU usage exceeds 75% and removes virtual machines when CPU usage drops below 30%. This ability to automatically adjust compute resources to match demand best represents which characteristic of cloud computing?

A company stores critical customer data in Azure Blob Storage. The compliance team requires that the data remains available for read operations even if the primary Azure region experiences a complete outage. They plan to use an Azure storage redundancy option that automatically replicates data to a secondary region and allows read access from that secondary region during an outage, without requiring any manual failover action. Which storage redundancy option should they configure on the storage account?

A multinational company has multiple Azure subscriptions for different business units. The central governance team wants to define a standardized environment that must be automatically applied to every new subscription. The standard must include a set of Azure Policy definitions (e.g., allowed regions), a specific Azure RBAC role assignment (e.g., a contributor access for a central security group), and a preconfigured resource group with a virtual network. The team wants to package all these components together so that they can be deployed consistently and updated centrally. Which Azure service should the team use?

Which Azure service provides a fully managed message-passing service for disconnecting front-end web apps from back-end processors?

A company wants to analyze historical spending data across all Azure subscriptions and set proactive budget alerts to prevent cost overruns. They also need to identify spending trends by resource type. Which Azure tool should they use to meet all these requirements?

Which Azure service provides a way to run containerized applications using a managed Kubernetes service without needing to manage the Kubernetes control plane?

Which Azure service provides a managed registry for Docker container images and OCI artifacts?

A hospital maintains its patient records on physical servers located within its own on-premises data center due to strict data residency regulations that prohibit patient data from leaving the country. For analytical workloads that process only anonymized data, the hospital uses Azure virtual machines and Azure Synapse Analytics. This combination of on-premises and cloud resources best describes which cloud deployment model?

A company manages a production Azure subscription that contains critical resources. The security team wants to prevent any user, including users with the Owner role, from accidentally deleting the entire subscription or any resource within it. The team still wants authorized users to be able to modify settings and create new resources. Which Azure feature should the team use?

Which statement accurately describes the relationship between availability and SLA percentage?

Which cloud computing characteristic allows an organization to avoid purchasing excess capacity to handle occasional peak loads?

A company has a large dataset of historical financial records that must be retained for 10 years to comply with regulatory requirements. The data is accessed only a few times per year during audits. When accessed, a retrieval delay of up to 15 hours is acceptable. The company wants to minimize storage costs for this dataset. Which Azure Blob storage access tier should the company use?

What is the primary purpose of Azure Virtual Network (VNet)?

A company deploys a web application on Azure App Service. During a marketing campaign, they expect traffic to double. The app uses a Standard tier App Service plan. They want to ensure that the additional load is handled without performance degradation while keeping costs minimal. Which action should they take?

Which Azure tool helps estimate the cost savings of migrating on-premises workloads to Azure compared to current on-premises costs?

A company stores compliance logs in Azure Blob Storage. The logs must remain available even if an entire Azure datacenter within the primary region fails. The company is cost-conscious and wants to minimize storage costs while meeting this availability requirement. The company does not need to access the data from a secondary location during a disaster. Which storage replication option should the company choose?

Which Azure service provides an enterprise-grade CI/CD pipeline for building, testing, and deploying applications?

Which Azure feature allows you to define and enforce naming conventions for Azure resources?

An IT administrator needs to manage Azure resources via command line across both Windows and Linux systems. Which tools support this?

Which cloud benefit specifically refers to Microsoft's commitment to securing customer data and keeping it private?

Which Azure networking feature allows you to filter outbound internet traffic from Azure VMs using a managed cloud firewall?

A company runs a web application on two Azure virtual machines (VMs) in different availability zones within the same region. The application maintains user session state in memory on the VMs. The company needs a load balancing solution that distributes incoming HTTP requests across both VMs, ensures all requests from a specific user session are routed to the same VM (session persistence), and terminates SSL/TLS to offload encryption from the VMs. Which Azure service should the company use?

What does the Azure Pricing Calculator help you do?

A company is migrating its on-premises infrastructure to Azure. Previously, the company purchased physical servers, networking equipment, and data center space every three years, paying a large sum upfront. After migration, the company expects to pay a monthly invoice based only on the virtual machines and storage it actually uses, with the ability to increase or decrease resources as needed without additional upfront costs. This change in cost structure is best described by which pair of cloud computing concepts?

A company has deployed several Azure virtual machines that host a critical internal application. The IT team needs to provide secure remote desktop access to these VMs for system administrators without assigning public IP addresses to the VMs or maintaining a VPN connection. The solution must provide seamless, browser-based RDP connectivity using SSL. Which Azure service should the IT team use?

A company uses Azure to host its virtual machines and storage. The company receives a monthly invoice that charges based on the exact number of virtual machine hours and gigabytes of storage consumed. No upfront payment is required. Which characteristic of cloud computing does this billing model represent?

Which Azure storage service is best suited for storing unstructured data such as images, videos, and log files?

A company plans to containerize a legacy web application and run it on Azure. The application experiences variable traffic volumes, with periodic spikes during lunch hours and weekends. The company wants the solution to automatically increase the number of running container instances during high demand and reduce them during low demand, without requiring any manual intervention or management of server infrastructure. Which Azure compute service should the company use?

What are the two types of Azure Resource Locks?

Which Azure service provides a hybrid cloud solution that enables running Azure services in on-premises data centers?

A startup wants to deploy a web application that experiences unpredictable traffic spikes. They need to scale resources automatically without manual intervention. Which benefit of cloud computing directly addresses this requirement?

Which Azure service provides a fully managed platform for building real-time analytics and complex event processing using SQL-like queries on streaming data?

A company migrates its web application to Azure. The CFO wants to view detailed reports of CPU usage, storage consumption, and network bandwidth for each team's resources to accurately allocate costs. The company uses Azure Cost Management and Billing to generate these reports. Which characteristic of cloud computing does this capability best illustrate?

Which Azure service provides a fully managed PostgreSQL database with automatic backups, high availability, and intelligent performance recommendations?

A company plans to run a large-scale batch processing job on Azure that runs for 10 hours every night. The job is fault-tolerant and can be interrupted. They want to minimize cost as much as possible. Which Azure virtual machine pricing option should they use?

A company is planning to migrate its customer relationship management (CRM) system to the cloud. The company is evaluating three service models: deploying the CRM on Azure Virtual Machines (IaaS), using Azure App Service to host a custom CRM web application (PaaS), and subscribing to a cloud-based CRM software like Dynamics 365 (SaaS). According to the Microsoft shared responsibility model, which of the following statements accurately describes the division of security responsibilities across these three options?

A company has deployed several virtual machines in an Azure virtual network. The IT administrators need to connect to these VMs using RDP and SSH from the internet. However, the company's security policy prohibits assigning any public IP addresses to the VMs and also prohibits exposing the VMs directly to the internet. The solution must be fully managed by Azure and require no additional infrastructure in the virtual network. Which Azure service should the company use?

A hospital is migrating patient data to the cloud. The hospital is responsible for managing who can access the data and for encrypting the data before upload. The cloud provider is responsible for securing the physical datacenters, network infrastructure, and hypervisor. This division of security responsibilities is described by which model?

A company wants to replicate its on-premises production environment to Azure for disaster recovery purposes. In the event of an on-premises outage, they can quickly start the replicated environment in Azure. Which cloud benefit does this best describe?

A company has a legacy on-premises application that processes sensitive financial data. Due to regulatory requirements, certain data cannot leave the company's on-premises data center. However, the company wants to take advantage of the cloud's scalability for the application's compute-intensive batch processing jobs. The batch jobs need to access the sensitive data but must process it without the data ever being stored in the cloud. The batch jobs will be orchestrated from the cloud. Which cloud deployment model best describes this architecture?

Which Azure service provides a managed, serverless SQL database that scales automatically and pauses when not in use?

What is 'zero trust' security model, and how does Azure support it?

A financial services company must migrate a critical application to Azure. Regulatory compliance requires that the virtual machines (VMs) hosting this application run on physical servers that are dedicated solely to the company and not shared with any other Azure customer. The company needs full control over server hardware maintenance, including the ability to schedule updates and isolate the environment at the physical layer. Which Azure compute solution should the company use?

A company has a management group hierarchy: Root (tenant root group) > Contoso > Sales, Marketing. They want to assign an Azure policy that applies to all subscriptions under the Sales and Marketing management groups only. The policy must not affect any other subscriptions in the hierarchy. Where should they assign the policy?

Which Azure service provides a dedicated hardware security module (HSM) for generating and storing cryptographic keys?

Which Azure feature reduces costs by allowing customers to use existing on-premises Windows Server licenses in Azure?

Which of the following best describes Platform as a Service (PaaS)?

A company plans to deploy a critical web application on Azure virtual machines in the West US region. The application must remain available if a single datacenter within that region experiences a complete outage. The company also requires the virtual machines to be connected to each other with low-latency network connectivity. Which Azure feature should the company use to deploy the virtual machines?

A company uses Azure to host multiple virtual machines and virtual networks. The network team is responsible for configuring and maintaining virtual networks, subnets, and network security groups. The company wants to ensure that the network team can manage these network resources but cannot modify or delete virtual machines. Which Azure built-in role should the company assign to the network team?

Which Azure service provides a managed caching layer to reduce database load and improve application response times?

A company wants to enforce a policy that all Azure resources must have a 'CostCenter' tag. They want to automatically apply the tag to new resources, and also to existing resources that are missing it. Which Azure service should they use?

Which Azure AI service can read and extract text, key-value pairs, and tables from documents and forms?

What is the purpose of the Azure Total Cost of Ownership (TCO) Calculator?

A US-based financial services company must ensure that all customer data remains within the United States at all times to comply with regulatory requirements. The company plans to replicate its Azure SQL database between two Azure regions for disaster recovery. The solution must guarantee that if a region experiences a major outage, the paired region is prioritized for recovery. Additionally, the solution should ensure that during planned maintenance, only one region in the pair is updated at a time. Which Azure architecture feature should the company use?

Which Azure service provides a globally distributed data warehouse for running complex analytics queries at petabyte scale?

A company uses a single Azure subscription for its development and production workloads. The finance team wants to set a monthly spending limit for the entire subscription and receive an email alert when the costs are projected to exceed 80% of that limit. The company does not want any resources to be automatically stopped or deleted when the limit is reached. Which Azure feature should the finance team configure?

Which statement best describes the concept of 'predictability' as a cloud benefit?

Which Azure feature provides a way to organize and manage access to resources by creating a hierarchy above subscriptions?

Which of the following statements accurately describes the shared responsibility model for SaaS applications?

What is a key advantage of using Azure Availability Zones over a single data center deployment?

What is a key characteristic of the public cloud model?

Which Azure cost management practice helps identify which teams or projects are consuming Azure resources through cost allocation?

A company deploys two Azure virtual machines (VMs) into the same availability set. The first VM runs a web server and the second runs a database server. The company's primary concern is that during Azure platform maintenance events (e.g., OS updates to the underlying host) or in the event of a hardware failure in the datacenter, both VMs should not be impacted at the same time. Which benefit does placing the VMs in the same availability set provide?

Which Azure service provides a centralized console for monitoring the health, performance, and security of your entire Azure environment?

Which Azure storage redundancy option replicates data across multiple availability zones within a single region?

A company is adopting Azure and needs to deploy a standardized environment that includes a resource group, a virtual network with specific IP address ranges, and a set of Azure Policy definitions to restrict allowed deployment locations. The environment will be deployed to multiple subscriptions used by different departments. The company requires a repeatable, versioned package that defines the resources, policies, and role assignments as a single item. The solution must allow updates to be managed and enforced over time. Which Azure feature should the company use?

Which Azure RBAC role allows a user to manage all Azure resources but cannot grant access to others?

A company has a global web application deployed on Azure virtual machines in three separate Azure regions: West US, West Europe, and Southeast Asia. The application must automatically direct each user to the region that is geographically closest to the user's location in order to minimize latency. The solution must expose a single DNS name that does not change if regions are added or removed. The company does not need to offload SSL certificates or perform URL-based routing at the global level. Which Azure service should the company use to meet these requirements?

What does the Azure SLA for a storage account guarantee?

A large enterprise manages hundreds of Azure subscriptions. The central governance team wants to ensure that every resource deployed across all subscriptions always has two required tags: 'Department' and 'CostCenter'. If a resource is created without these tags, the governance policy must automatically add the missing tags with placeholder values (e.g., 'Department: Unknown') and generate a compliance report. The team does not want to rely on user training or manual audits. Which Azure service should the team use to meet these requirements?

Which of the following is a characteristic of the public cloud deployment model?

What is the definition of 'governance' in the context of Azure cloud management?

A company wants to track spending across different projects. They have multiple Azure subscriptions and need to assign costs to specific departments based on resource usage. Which Azure feature enables them to view and analyze costs by resource tags?

A company migrates its on-premises SQL Server database to Azure SQL Database. The company's security team is concerned about who is responsible for applying security updates to the operating system that hosts the database engine. According to the shared responsibility model for cloud computing, who is responsible for patching the operating system of the underlying host?

Which Azure service provides intelligent threat protection across your Azure and hybrid environments by collecting and analyzing security data?

A company hosts a web application on a single Azure virtual machine. Over the past month, the application's CPU utilization has consistently remained above 90%, causing slow response times. The administrator plans to modify the virtual machine's size from Standard_D2s_v3 (2 vCPUs) to Standard_D8s_v3 (8 vCPUs) to improve performance. Which scaling method does this change represent?

A company has multiple Azure subscriptions for different projects. They want to apply a common set of policies and role assignments to all subscriptions under the 'Research' department. They also plan to add more subscriptions for Research in the future. What should they use?

Which Azure service provides network address translation for outbound internet connectivity from private subnets without public IP addresses on individual resources?

A company wants to receive proactive recommendations to reduce Azure costs, improve security, and increase reliability. They want a single dashboard that provides best practices for their deployed resources. Which Azure service should they use?

A company wants to store large amounts of unstructured data (e.g., images, videos, documents) that will be accessed from multiple applications over HTTP/HTTPS. The data needs to be highly durable and available. Which Azure storage service should they use?

A company wants to understand who is responsible for securing the operating system on an Azure virtual machine. According to the shared responsibility model, who is responsible?

Which of the following is a key advantage of the public cloud model for a startup company with limited capital?

An organization wants to combine on-premises data center resources with Azure public cloud services to extend capacity during peak demand. Which cloud deployment model describes this approach?

A company uses multiple Azure subscriptions for development and production. The finance team wants to set a monthly budget of $1,000 for a specific dev subscription. When the actual cost reaches 80% of the budget, the team wants to receive an email alert. If the cost exceeds 100%, they want to automatically stop a specific virtual machine in that subscription to prevent overspending. Which Azure feature should the team use to automate the stopping of the VM when the budget is exceeded?

Which Azure service provides a managed Apache Spark environment for big data analytics and machine learning workloads?

A company runs a web application that experiences unpredictable traffic spikes. They want the cloud to automatically increase the number of virtual machine instances during high demand and decrease them when demand drops, without manual intervention. Which cloud computing characteristic does this describe?

Which Azure service provides language understanding (NLU) capabilities to build applications that understand natural language commands?

A company wants to store sensitive encryption keys in a hardware security module (HSM) to meet compliance requirements. Which Azure service provides HSM-backed key storage?

Which Azure feature allows an organization to provide temporary, time-limited access to Azure resources without permanent role assignment?

A company runs a web application on Azure virtual machines. During a promotional event, the number of users increases significantly. To handle the increased load, the IT team adds five additional virtual machines to the existing pool, so that the total number of VMs increases from three to eight. Which type of scaling is the team using?

A company has 10 Azure subscriptions organized under two management groups: Production and Non-Production. The governance team needs to enforce a policy that all Azure resources must be deployed only in the East US or West US Azure regions. The policy must apply to every subscription under both management groups, including any new subscriptions added in the future, without requiring separate assignments per subscription. Which Azure feature should the team use to achieve this with the least administrative effort?

Which Azure service provides intelligent, AI-powered search over internal business data, including documents, databases, and Teams conversations?

A company has an Azure Policy assigned to all subscriptions that denies creation of any resource without a 'CostCenter' tag. During an emergency, a team needs to create a resource without the tag. They want a temporary exception without changing the policy. What should they create?

Which Azure portal feature enables you to create a customized view of the most important resources and metrics at a glance?

A company stores critical financial records in an Azure Storage account. The operations team needs to ensure that the storage account cannot be deleted by any user, including administrators with Contributor permissions. However, authorized users must still be able to add and modify blobs. The solution should not affect the ability to update the account's configuration. Which Azure feature should the company implement?

Which Azure concept represents the hierarchical organization of management groups, subscriptions, resource groups, and resources?

A company needs to ensure that Azure resources are deployed with specific settings enforced without the ability for any user to change them. Which approach achieves this?

Which feature allows Azure administrators to require users to complete an additional verification step (beyond password) before accessing Azure resources?

Which Azure service provides a private, isolated section of the Azure cloud where you can launch Azure resources in a virtual network you define?

What is the Microsoft Trust Center?

A company has a policy that every Azure virtual machine must have the Azure Monitor Agent installed and configured to send metrics to a central Log Analytics workspace. To enforce this requirement without relying on manual user action, the governance team wants to automatically deploy the agent to any existing or new VM that is missing it. They also need to generate a compliance report showing any VMs where the installation failed. Which Azure Policy effect should the team use to meet these requirements?

What is the difference between vertical scaling and horizontal scaling?

A company uses Azure Policy to enforce governance on their subscriptions. They want to ensure that every newly created Azure resource automatically receives two tags: 'Owner' and 'CostCenter'. If a user or an automated process creates a resource without specifying these tags, the policy should add the missing tags with default values of 'Unassigned' without blocking the resource creation. Which Azure Policy effect should be used in the policy definitions?

A company has multiple Azure subscriptions, each managed by different development teams. The central governance team wants to ensure that every subscription adheres to the same security baselines, including specific Azure Policy definitions, RBAC role assignments, and a standard resource group structure. The team needs a single, versioned package that brings these components together and can be consistently deployed across all subscriptions. Which Azure service should the governance team use to meet these requirements?

What is a key difference between vertical scaling and the benefit of cloud elasticity?

A company needs to run a containerized application without managing any virtual machines or cluster orchestration. Which Azure service is best suited for this?

Which Azure compute service allows you to run a group of identical virtual machines that can automatically scale in or out based on demand?

Which Azure service provides a managed Kubernetes environment that automatically scales node pools based on application demand?

Which Azure cost management feature allows you to analyze historical spending and forecast future costs?

Which Azure tool helps you compare the 5-year cost of running an on-premises datacenter versus migrating those workloads to Azure?

What is the purpose of Azure Private DNS zones?

Which Azure database service stores time-series data from IoT devices for long-term trend analysis and anomaly detection?

Which Azure service generates automatic recommendations for right-sizing, reserved instance purchasing, and idle resource cleanup?

Which Azure compliance tool helps financial services organizations meet GDPR requirements for data subject requests?

A company needs to store log files from multiple applications. The logs are accessed infrequently for compliance audits but must be retained for 10 years. Storage cost must be minimized. Which Azure Storage access tier should they use for the blob storage?

A company runs a critical web application on Azure virtual machines. To ensure the application remains accessible even if an entire Azure datacenter becomes unavailable due to a power outage, the company deploys virtual machines in two different Azure regions and uses Azure Traffic Manager to automatically route traffic to the healthy region. Which benefit of cloud computing does this configuration primarily demonstrate?

Which cloud benefit helps organizations meet workload demands during unexpected events like viral marketing campaigns without service degradation?

Which Azure service provides a hybrid connection solution for enabling applications to access on-premises resources without inbound firewall changes?

A startup company is developing a new mobile application. The development team needs to quickly create test environments to validate new features. They can provision virtual machines and databases in Azure within minutes, use them for a few hours, and then delete them when done. This ability to rapidly deploy and decommission resources directly supports which cloud computing benefit?

A company runs a workload that requires predictable performance and dedicated physical servers. They also need to ensure no other tenant uses the same hardware. Which cloud deployment model meets these requirements?

A company runs several Azure virtual machines (VMs) in a virtual network. Administrators need to connect to these VMs using Remote Desktop Protocol (RDP) to perform maintenance tasks. The security team mandates that the VMs must not have any public IP addresses assigned. All RDP traffic must be routed through a fully managed Azure service that provides secure TLS-based access directly from the Azure portal, without requiring any client software installation on the administrator's workstation. Which Azure service should the company use?

Which Azure service enables you to create, train, and deploy machine learning models using a visual drag-and-drop interface?

Which Azure networking service provides private connectivity from a virtual network to Azure PaaS services without traffic going over the internet?

A solutions architect is designing a storage solution for a large media company. The company needs to store video files that are accessed infrequently but must be retained for several years for compliance. Which two Azure storage options meet these requirements? (Select two.)

A company runs a web application on Azure App Service. The application experiences variable traffic patterns with occasional sudden spikes. The company wants to automatically increase the number of instances during high demand and decrease them during low demand to optimize cost and performance. The solution must require no manual intervention after initial configuration. Which Azure App Service feature should the company enable?

A company deploys web servers across Azure regions East US and West Europe. The application must automatically direct each user to the region that provides the lowest network latency, and if an entire region becomes unavailable, traffic must be seamlessly redirected to the remaining healthy region. Which Azure service should the company use?

A company needs to store large amounts of unstructured data, such as images and videos, which will be accessed by multiple applications over the internet. The data must be highly durable and available. Which Azure storage service should they use?

What is Azure Disk Storage used for?

A company runs an e-commerce web application on Azure virtual machines that are part of a virtual machine scale set configured with an autoscale rule based on CPU utilization. During a flash sale, customer traffic surges, causing the average CPU utilization across all instances to exceed 75% for five minutes. The scale set automatically provisions three additional VM instances to handle the increased load. After the sale ends, traffic normalizes, CPU utilization drops below 30%, and the scale set automatically removes the extra instances. This scenario best illustrates which characteristic of cloud computing?

A company has multiple Azure subscriptions, each belonging to a different department. The finance department wants to set spending limits per subscription and receive automated email notifications whenever actual spending reaches 80% of the allocated budget. Which Azure feature should they configure?

Which aspect of cloud computing allows organizations to focus on their core business rather than managing IT infrastructure?

A company uses Azure Blueprints to define a repeatable set of Azure resources and policies for new subscriptions. They want to ensure that when a new subscription is created, a specific role assignment is automatically applied. What should they include in the blueprint definition?

A company runs a mission-critical application on Azure virtual machines. The application must remain available even if an entire Azure datacenter in a region experiences a complete outage (e.g., power failure). The company wants all VMs to be located in the same Azure region to minimize latency. Which Azure feature should the company use to deploy the VMs?

Which Azure service provides a managed Apache Kafka-as-a-service offering that allows existing Kafka applications to work without code changes?

A company runs its line-of-business application on a virtual machine in an on-premises data center. The business continuity team wants to replicate the entire server (including operating system, applications, and data) to Azure so that if the on-premises site fails, the workload can be quickly started in an Azure region. The team also needs the ability to perform non-disruptive disaster recovery drills to validate the failover process. Which Azure service should the team use?

What is a key difference between Azure Public regions and Azure Government regions?

Which Azure RBAC built-in role allows a user to view all resources but NOT make any changes?

How does cloud computing help with disaster recovery compared to traditional on-premises approaches?

Which Azure service provides centralized log collection, querying, and analysis from multiple Azure resources and services?

A company's security policy requires that all Azure Storage accounts must enforce a minimum TLS version of 1.2. The governance team needs to continuously audit all existing storage accounts for compliance with this requirement, and also ensure that any new storage account that does not meet the TLS version requirement is automatically flagged as non-compliant in the Azure portal compliance dashboard. The team does not want to block the creation of non-compliant resources; they only need to report them. Which Azure feature should they use?

A company has multiple on-premises sites that need to connect to Azure over high-throughput, low-latency private connections. They want a dedicated private connection that does not traverse the internet. Which Azure service should they use?

According to Microsoft, which factor does NOT affect the SLA percentage for an Azure service?

Which Azure service provides a managed implementation of the gRPC protocol for communication between microservices?

A company needs to host a website that must automatically scale to handle millions of concurrent users during peak events. Which Azure architecture BEST supports this?

A hospital stores patient health records in the cloud. They are responsible for encrypting the data before storing it, while the cloud provider is responsible for securing the physical datacenter. Which cloud model is being described?

A company plans to migrate a steady-state application to Azure. The application requires a fixed number of virtual machines running 24/7 for the next three years. The company wants to minimize the total cost of ownership for these virtual machines over the three-year period. Which Azure pricing option should the company select when purchasing the virtual machines?

A company has two Azure virtual networks: VNet-A in the East US region and VNet-B in the West US region. Both virtual networks use non-overlapping IP address spaces and are deployed in different resource groups. The company needs to enable communication between resources in VNet-A and VNet-B using private IP addresses only, with low latency and without any traffic traversing the public internet. The solution must not require deploying a virtual network gateway or any additional network appliance. Which Azure service should the company use?

Which Azure service provides a way to create, test, and manage APIs, including rate limiting, authentication, and analytics?

Which Azure service manages application secrets, API keys, and certificates in a centralized, secure vault?

A developer is building a serverless application that requires integration with an on-premises SQL Server database for real-time data processing. The on-premises network is connected to Azure via a site-to-site VPN. Which Azure service would allow the function to securely access the on-premises database without exposing it to the public internet?

Arrange the steps to configure an Azure load balancer for high availability.

A company subscribes to a SaaS-based customer relationship management (CRM) application hosted in the cloud. The CRM provider manages the application, runtime, and infrastructure. The company's employees access the CRM via a web browser. According to the shared responsibility model, which security responsibility belongs solely to the company?

Which Azure cloud benefit allows a company to avoid predicting exactly how much compute capacity it needs months in advance?

A company is moving from an on-premises data center to Azure. Instead of paying a large upfront cost for servers, they will pay a monthly subscription fee based on usage. This represents a shift from which type of expenditure to which?

A company needs to run a legacy application that requires full control over the operating system, including custom kernel modules. They also need to ensure high availability with multiple instances. Which Azure compute service should they use?

Which Azure service enables you to monitor, diagnose, and gain insights into the performance of web applications, including user behavior analytics?

A company is migrating its on-premises workloads to Azure. Previously, they purchased servers every three years as a large capital investment. Now, they pay a monthly subscription for virtual machines based on actual usage, with no long-term commitment. Which type of cloud expenditure model does this represent?

A company uses Azure Policy to enforce that all virtual machines must be from an approved list of SKUs. They want to ensure that any non-compliant VMs that already exist are automatically remediated by changing the VM size to a compliant SKU. Which policy effect should they use?

Which Azure service provides a platform for running Apache Kafka for real-time event streaming without managing infrastructure?

A company wants to estimate the cost of a new Azure solution before deploying it. Which tool should they use?

What is the Azure free account, and what does it provide?

Which Azure service provides managed Apache Kafka streaming without managing brokers or Zookeeper?

A company has multiple Azure subscriptions for different departments. The IT team wants to apply a common set of policies (e.g., allowed VM sizes) and assign the same role-based access control (RBAC) permissions across all subscriptions automatically. Which Azure feature should they use?

Which Azure service allows you to run Windows or Linux virtual machines in Azure?

Which statement correctly describes the operational cost model of cloud computing?

A manufacturing company traditionally relied on an internal IT team to procure, configure, and install physical servers for each new project. The provisioning process typically took three to four weeks. After migrating to Azure, developers can now provision virtual machines and other resources directly from the Azure portal within minutes without any interaction with the IT team. This capability best represents which characteristic of cloud computing?

A financial services company must deploy a standardized environment for a new customer-facing application. The environment must include a specific set of Azure resources (such as virtual networks, databases, and App Service plans), pre-configured role assignments for the compliance team, and a collection of Azure Policy definitions that enforce encryption and tagging rules. The company needs to package all these components into a single, versioned artifact that can be consistently deployed across multiple subscriptions and regions, with the ability to track changes and updates. Which Azure service should the company use to achieve this?

A company has an Azure subscription used by several development teams. The governance team wants to identify any virtual machines that are not tagged with a mandatory 'CostCenter' tag. The team does not want to block the creation of untagged VMs; they only want to report on non-compliant resources in Azure Policy's compliance dashboard. Which Azure Policy effect should they use in their policy definition?

A company runs a web application on two VMs in the same Availability Set. What is the guaranteed SLA for the VMs?

A web application needs to store large amounts of unstructured data (images, documents) that will be accessed via HTTP from anywhere in the world. The data must be highly durable and scalable. Which Azure storage solution is most appropriate?

What is disaster recovery in the context of cloud computing?

What is the role of a cloud provider's physical datacenter security in the shared responsibility model?

Which of the following is the cloud provider's responsibility under the shared responsibility model for Infrastructure as a Service (IaaS)?

A retail company has 50 on-premises servers in multiple branch offices that run legacy applications that cannot be migrated to Azure. The company wants to govern these servers using the same Azure Policy and tagging standards that they use for their Azure virtual machines. They also want to view these servers alongside Azure resources in the Azure portal. Which Azure service should they deploy to extend Azure management capabilities to these on-premises servers?

Which cloud model is MOST appropriate for an organization that needs complete control over their infrastructure and cannot share resources with other organizations due to regulatory requirements?

Which Azure service enables bi-directional communication between IoT applications and millions of IoT devices?

Which of the following is NOT a benefit of moving to cloud computing?

A company wants to ensure that all Azure resources are created within a specific set of approved regions. They want to automatically block any resource creation that is not in an approved region. Which Azure Policy effect should they use?

Which Azure feature enables centralized governance for multiple Azure AD tenants in a managed service provider (MSP) scenario?

A retail company needs to process real-time inventory updates from thousands of stores simultaneously. Which Azure data ingestion service BEST handles this scale?

A company's finance team wants to proactively monitor Azure spending and receive automated email notifications when costs reach 80% of a predefined monthly limit. They want to avoid manual cost tracking and set up alerts without custom scripting. Which Azure feature should they use?

A company is adopting Azure and wants to ensure that every new subscription automatically includes a standard set of governance artifacts: two custom Azure Policy definitions (one for allowed locations, one for resource tagging), a custom Role-Based Access Control (RBAC) assignment for the security team, and an initial resource group with an Azure Resource Manager (ARM) template that sets up a network topology. The company wants to version these artifacts and update them over time, ensuring that new subscriptions always use the latest approved version. Which Azure service should the company use to package and deploy this standardized environment?

Which Azure service enables you to connect to an Azure virtual machine using a web browser without exposing RDP/SSH ports to the internet?

Which Azure service translates text between languages using neural machine translation?

A company runs a development and testing environment on Azure virtual machines. The environment is only needed during standard business hours (9:00 AM to 5:00 PM), Monday through Friday. The IT team configures an automated schedule that deallocates all VMs at 5:00 PM each weekday and starts them again at 8:00 AM the next morning. The team reports a significant reduction in their monthly Azure bill after implementing this schedule. Which essential characteristic of cloud computing does this scenario primarily demonstrate?

A company runs a critical application on-premises and plans to extend its data center to Azure. The company needs a dedicated, private network connection between the on-premises network and Azure that bypasses the public internet. The connection must provide higher bandwidth and more reliable, lower-latency connectivity than a site-to-site VPN. The company also requires a Service Level Agreement (SLA) for the connection's availability. Which Azure service should the company use?

Which Azure identity feature ensures that users must provide an additional form of verification beyond their password when signing in?

A company has a management group hierarchy: Root > Europe > Production. They assign a policy at the Root level that denies creation of resources without a tag. Later, they assign a different policy at the Europe level. What is the effective effect on the Production subscription?

A development team needs to quickly provision a new virtual machine for a short-term testing environment. The team uses the Azure portal to create the VM without submitting a request to the IT operations team or waiting for any manual approval. The VM is provisioned and available within minutes. Which cloud computing characteristic does this scenario best represent?

A company runs a seasonal e-commerce application. During the holiday season, demand spikes significantly, but the company does not want to pay for idle resources the rest of the year. They want the cloud to automatically add or remove compute resources based on real-time demand. Which cloud computing characteristic does this scenario best describe?

A company has an Azure subscription that hosts multiple virtual machines, databases, and storage accounts. The finance team wants to receive an automated email notification when the forecasted monthly spending for the subscription exceeds $10,000. The team needs to use a native Azure feature that can track actual and forecasted costs and trigger alerts based on a monetary threshold. The solution must not require custom scripts or third-party tools. Which Azure feature should the team configure?

Order the steps to set up Azure SQL Database with geo-replication.

Which Azure service provides a fully managed, cloud-based backup solution for protecting Azure VMs, SQL databases, and on-premises servers?

What does 'high availability' mean in the context of cloud computing?

A company wants to run a containerized microservices application on Azure. They need automatic scaling based on demand, service discovery, and rolling updates without manual intervention. They want to avoid managing the underlying virtual machines. Which Azure compute service should they choose?

Which cloud characteristic ensures data remains accessible and readable even when stored for long periods?

A company manages 50 Azure SQL Databases, each used by a different department. Each database experiences low average usage (less than 5 DTU on average) but unpredictable hourly peaks that can reach up to 50 DTU for short bursts. The company wants to minimize total cost while ensuring every database can handle its peak load without performance degradation. Which Azure SQL Database deployment option should the company choose?

A company has deployed applications in two separate Azure virtual networks (VNets) in the East US and West Europe regions. Each VNet contains multiple subnets with application servers and databases. The network team needs to enable direct, private IP connectivity between the VNets, ensuring that all traffic stays within the Azure backbone network and never traverses the public internet. The solution must also provide low latency for cross-region communication. They currently do not need a dedicated private connection to an on-premises datacenter. Which Azure service should they use?

Which Azure service provides a content delivery network (CDN) to cache static content at edge locations close to users?

Which Azure governance feature allows you to create a repeatable, deployable package of Azure resources, role assignments, and policies for new subscriptions?

A retail company runs its e-commerce platform on a public cloud. During a major sale event, they want to ensure that the application remains accessible even if an entire data center fails. Which cloud computing concept does this describe?

What is Azure Active Directory Conditional Access?

Which Azure service enables accessing on-premises applications securely from anywhere without requiring VPN or changes to the network perimeter?

Which Azure feature allows you to save money on Azure SQL Database and Azure SQL Managed Instance using existing on-premises SQL Server licenses?

A multinational company is expanding its online retail business to new countries. The company needs to deploy its web application in Azure regions that are geographically close to customers in Europe, Asia, and North America to minimize latency. The IT team can deploy identical application instances in multiple regions within minutes using Azure Resource Manager templates. Which benefit of cloud computing does this scenario best illustrate?

A company runs a production web application on Azure App Service. The development team is working on a new version of the application and wants to deploy it to a staging environment to perform validation tests. After testing, they need to gradually shift a percentage of live user traffic to the new version while monitoring for issues. If any problems occur, they must be able to instantly send all traffic back to the original version with zero downtime. Which Azure App Service feature should the team use to achieve this?

Which statement BEST describes the benefit of cloud computing's 'predictable costs'?

Which Azure service allows you to run code on-demand without managing servers, paying only for execution time?

Which cloud concept refers to the ability to recover quickly from a failure without impacting user experience?

A company uses a public cloud service where they share physical hardware with other customers. This allows the provider to offer low prices due to economies of scale. Which cloud characteristic is being described?

A developer wants to send notifications to mobile devices from a backend service. Which Azure service is designed for this purpose?

A company is deploying two Azure virtual machines that host a critical line-of-business application. The application is stateful and requires that the VMs are located in the same datacenter but on separate physical hardware to protect against a rack-level failure. Additionally, the VMs must be updated during Azure platform maintenance in a staggered manner to ensure the application remains available. Which Azure feature should the company configure for these VMs?

Which Azure network security service filters network traffic to and from Azure resources using rules based on source, destination, port, and protocol?

Which Azure service acts as a global load balancer that optimizes routing of user traffic to the nearest Azure endpoint for the best performance?

A company uses Azure Blueprints to define a standard environment. They publish a new version of the blueprint with an updated role assignment. All existing subscriptions that were created from an older version need to receive the new role assignment. What should they do?

Which Azure service enables you to stream live events and on-demand video content to global audiences?

What is the purpose of Azure Service Level Agreements (SLAs)?

Which Azure service provides a secure, scalable API gateway that manages access to backend services?

A bank needs to keep some sensitive customer data on-premises due to regulatory requirements, but wants to use cloud services for less sensitive workloads. Which cloud deployment model should they adopt?

A financial institution must keep sensitive customer financial data on-premises to comply with regulatory requirements. However, they also want to use Azure to run compute-intensive analytics on anonymized datasets, taking advantage of scalable resources without managing physical servers. Which cloud deployment model should they adopt?

A company is deploying a business-critical application on Azure virtual machines in the East US region. The application's managed disks must remain available even if an entire Azure datacenter experiences an outage. The company does not require cross-region disaster recovery. Which storage redundancy option should they select for the managed disks?

Which Azure service provides managed DNS hosting for domain names, enabling reliable and fast DNS queries?

A company's field employees use a custom mobile app to upload sales data from their smartphones while at client sites. The app connects to an Azure-hosted backend API. The company's IT team notes that the mobile app can connect to the Azure service using standard HTTPS from any location with internet connectivity, without requiring a VPN. This ability to access cloud resources over the internet from various devices and locations is an example of which key characteristic of cloud computing?

Which Azure service provides real-time monitoring and alerting for web application availability and performance from multiple global locations?

A company is evaluating cloud providers. They want to ensure that their data remains within a specific country due to legal requirements. Which cloud computing concept is most directly related to this requirement?

A company runs an e-commerce application on multiple Azure virtual machines in a single region. The IT team needs to distribute incoming web traffic across the VMs, offload SSL/TLS termination to improve VM performance, and route requests based on URL path (for example, /images to one pool of VMs and /api to another). The solution must handle these requirements within a single Azure region. Which Azure service should the company use?

What is the benefit of 'economies of scale' in cloud computing?

A company deploys a critical application on Azure virtual machines across three different availability zones in the East US region. The application is designed to handle the failure of one zone by automatically failing over to the remaining healthy zones. Which type of failure does this architecture primarily protect against?

Which Azure service provides a fully managed time-series database optimized for IoT and operational data?

A company is deploying a critical application on Azure Virtual Machines. They need to ensure that the application remains available during Azure platform updates. They also want to distribute the VMs across fault domains within an availability set. What is the primary purpose of fault domains?

A global software company hosts its SaaS product on Azure. Thousands of different customers' virtual machines and databases run on the same physical servers in Microsoft's data centers, yet each customer can only access their own resources and cannot see or interact with other customers' data. Which cloud computing characteristic does this scenario primarily describe?

A company is migrating a custom line-of-business application to Azure. The application handles sensitive customer data. The IT team is evaluating whether to deploy the application on Azure Virtual Machines (IaaS) or Azure App Service (PaaS). They want to understand the division of security responsibilities between Microsoft and the customer under the shared responsibility model. Which responsibility remains the customer's obligation regardless of whether they choose IaaS, PaaS, or SaaS?

Which Azure service provides pre-built, customizable chatbot capabilities that can be integrated into applications and websites?

A startup is building a mobile app backend and wants to use cloud services. They want to focus entirely on writing code and deploying features without worrying about server maintenance, operating system patches, or scaling infrastructure. Which cloud service model best fits this requirement?

An organization wants to ensure that no one can create Azure resources outside of approved geographic locations across all of their subscriptions. What is the most scalable way to enforce this?

A company has an Azure policy requirement that all new resources in a specific resource group must have a 'Department' tag. If a resource is created without this tag, the tag should be automatically added with a default value of 'Finance'. Which Azure Policy effect should be used?

A company runs an e-commerce website on a set of on-premises servers that are fully owned and depreciated. The website experiences predictable traffic surges during seasonal sales. The company plans to migrate to Azure and wants to pay only for the compute and storage resources consumed, with the ability to automatically add virtual machines during sales and remove them afterward. Which characteristic of cloud computing does this scenario best illustrate?

A company has multiple Azure subscriptions. They need to enforce a rule that only specific virtual machine sizes (e.g., Standard_D2s_v3) can be used across all subscriptions. They also want this rule to automatically apply to any future subscriptions created. Which Azure service should they use?

A company has a critical production resource group that contains several virtual machines and an Azure SQL Database. The IT manager wants to prevent anyone from accidentally deleting the resource group or any of its resources. However, authorized administrators must still be able to add, update, or delete individual resources within the group (except deletion of the group itself). Which Azure feature should the manager apply to the resource group?

An application deployed on Azure Virtual Machines needs to be resilient to failures within a single Azure region. The VMs are placed across multiple physically separate locations within the region, each with independent power, cooling, and networking. What is this feature called?

A company is considering moving its on-premises workloads to Azure. The CFO wants to understand how Azure pricing works. Which pricing model allows them to pay only for what they use, with no upfront costs or termination fees?

A company has a production Azure subscription used by multiple teams. The governance team wants to enforce a rule that only virtual machines (VMs) of specific SKU sizes (e.g., Standard_D2s_v3 and Standard_D4s_v3) can be deployed. If a team attempts to deploy a VM of a different SKU size, the deployment must be blocked immediately and the user must see an error message explaining the restriction. Which Azure feature should the governance team use?

Which Azure service provides a way to implement role-based access control for Kubernetes cluster resources?

A startup expects rapid growth and wants its cloud infrastructure to automatically add or remove compute resources based on real-time demand without manual intervention. Which cloud characteristic does this describe?

Which Azure feature provides a unified compliance score and consolidated view of your organization's compliance posture across different regulatory standards?

A company requires that all resources deployed in a production Azure subscription must include a 'Department' tag. Resources without this tag must be automatically prevented from being created. Which Azure service should the company use to enforce this requirement?

A company is subject to strict data residency regulations that require all personally identifiable information (PII) to remain on their own physical servers. However, they want to use Azure for compute-intensive analytics that do not process PII. They also need a consistent set of management tools to manage resources across both environments. Which cloud deployment model should the company adopt?

What is the purpose of Azure Marketplace?

A company needs to find all virtual machines that have the tag 'Environment:Production' and were created more than 6 months ago. They want to run a complex query across all subscriptions in their tenant. Which Azure tool should they use?

Which statement accurately describes the consumption-based pricing model for Azure services?

Which Azure storage tier should be used for data that is rarely accessed, can tolerate several hours of retrieval latency, and needs to be stored at the lowest cost?

An Azure service guarantees 99.95% uptime for virtual machines deployed with two or more instances in an availability set. If the monthly uptime falls below this percentage, customers can receive a service credit. What does this guarantee represent?

Order the steps to set up Azure Site Recovery for disaster recovery.

A small start-up company needs to run complex machine learning training jobs that require powerful GPU instances for only a few hours each day. The company cannot afford the high upfront capital expense of purchasing and maintaining multiple GPU servers on-premises. Instead, they spin up GPU-optimized virtual machines on Azure during training hours and delete them when the jobs finish, paying only for the compute time consumed. Which benefit of cloud computing does this scenario primarily illustrate?

A company wants to receive notifications when Azure services in their region experience an outage or planned maintenance that might affect their resources. Which Azure service should they set up alerts for?

Which Azure feature enables you to create custom roles with specific permissions when built-in RBAC roles do not meet your requirements?

A company has a simple containerized web application that runs in a single container. The application processes a workload for a few minutes every hour and remains idle the rest of the time. The company wants to deploy the container in Azure without managing any virtual machines or container orchestrators. They also want to pay only for the time the container is actually running, with no cost when idle. Which Azure compute service should the company use?

Which Azure service provides near real-time data analytics using SQL queries on streaming data from sources like IoT devices?

Which Azure service provides a managed Kubernetes environment that reduces the complexity and operational overhead of running Kubernetes?

Which feature of Azure subscriptions allows an organization to separate billing and access management for different departments?

A startup wants to avoid managing physical servers and instead focus on developing their application. Which cloud service model provides them with the most control over the operating system and applications while still not managing hardware?

Which Azure support plan provides a dedicated Technical Account Manager and a 15-minute response time for critical business impact issues?

Which Azure feature allows organizations to apply the same governance at a hierarchy of subscriptions and resource groups?

A company needs to connect their on-premises network to Azure with a dedicated, private, and high-bandwidth connection that does not traverse the public internet. They require an SLA for availability and performance. Which Azure service should they use?

In the context of cloud computing, what does 'going global in minutes' mean?

Which Azure service provides a managed relational database compatible with PostgreSQL?

A company has an Azure subscription used by multiple development teams. The security team wants to ensure that every virtual network (VNet) created in the subscription automatically has a specific network security group (NSG) associated with its default subnet. The NSG rules are defined by the security team, and developers should not have to perform any extra steps after creating a VNet. Which Azure Policy effect should the security team use in the policy definition?

A company migrates its on-premises servers to Azure virtual machines (IaaS model). The security team is planning the patching strategy and asks who is responsible for installing security updates on the guest operating system of the Azure VMs. According to the shared responsibility model, which statement is correct?

Which Azure support option provides technical support through community forums and documentation only?

A company has a policy that every Azure resource must have a 'CostCenter' tag assigned at creation time. The governance team wants to automatically prevent any resource creation if the tag is missing, without requiring manual review after deployment. Which Azure feature should they use to enforce this requirement?

A company uses Azure for multiple projects. The IT governance team wants to ensure that every new Azure resource within a subscription is automatically assigned a 'CostCenter' tag based on the resource group it is created in. The team does not want to rely on users manually applying the tag. They need a built-in Azure solution that enforces this rule without custom scripts. Which Azure feature should they use?

A company has five Azure subscriptions, each managed by a different department. The IT governance team needs to enforce a single set of compliance policies (e.g., allowed VM SKUs) and assign a specific role to a central security team across all subscriptions. The goal is to minimize administrative overhead. Which Azure component should the governance team use as the scope for these assignments?

Which Azure service provides intelligent search capabilities with AI-powered features like OCR, entity recognition, and key phrase extraction?

Which Azure pricing calculator helps you estimate monthly costs for Azure services before deploying them?

Which Azure service provides distributed tracing across microservices to help developers identify performance bottlenecks and failures?

Which cloud model provides the greatest degree of control over the underlying infrastructure?

A company wants to connect an on-premises network to Azure with a dedicated private connection that bypasses the internet. Which service should they use?

A company wants to track and analyze Azure costs across multiple departments. They have tagged resources with 'Department' tags. Which tool should they use to view cost breakdowns by department?

A company wants to reduce its carbon footprint by using a cloud provider that invests in renewable energy. They want to ensure that their workloads in Azure run in datacenters that are among the most energy-efficient. Which Azure benefit is most directly related to this goal?

A company deploys a web application on Azure VMs across two different physical locations within the same Azure region. These locations are isolated from each other in terms of power, cooling, and networking. If one location fails, the application remains available from the other location. Which feature achieves this?

What distinguishes a 'region pair' in Azure?

A company needs to track and optimize costs across multiple Azure subscriptions. They want to allocate budgets and receive notifications when spending exceeds forecasted amounts. Which Azure tool should they use?

Which Azure service provides a fully managed, cloud-hosted Kubernetes environment for AI and machine learning workloads?

A company wants to track costs by department across multiple Azure subscriptions. They have tagged resources with 'Department' tags. However, some resources are missing tags. They want to see a report of costs grouped by department, including untagged resources. Which Azure tool should they use?

A startup wants to run a web application without purchasing or managing any servers. They only want to upload their code and let the cloud provider handle everything from the runtime to scaling. Which cloud service model best fits this requirement?

A company runs business-critical ERP software on Azure. If the ERP application has a 99.9% SLA and the Azure SQL Database backing it has a 99.99% SLA, what is the overall composite SLA?

Arrange the steps to implement Azure Backup for a virtual machine.

Which Azure service provides an enterprise-grade, fully managed graph database as a service?

A company wants to deploy a standardized environment that includes Azure Policy assignments, RBAC roles, and resource group templates. They need to version these components and apply them to multiple subscriptions. Which Azure service should they use?

A company wants to pay only for the compute resources they actually use, with no upfront costs. They can scale up or down based on demand. Which cloud pricing model does this describe?

A company wants to connect their on-premises data center to Azure with a dedicated, private connection that does not traverse the internet. They also need to ensure high availability by having two active connections. Which Azure service and configuration should they use?

A company runs its production database on an Azure SQL Database (PaaS) and its custom application on an Azure virtual machine (IaaS). The company needs to ensure that operating system security patches are applied. According to the shared responsibility model, which resource requires the company to apply OS patches?

A company has deployed hundreds of virtual machines in Azure across multiple subscriptions. The governance team wants to generate a compliance report that identifies which VMs are using approved VM sizes and which are not, according to a corporate policy. The team must not block the deployment of non-compliant VMs; they only want to track compliance. Which Azure Policy effect should they use in the policy definition?

A company has multiple Azure subscriptions for different departments. The governance team needs to ensure that every new subscription is automatically provisioned with a consistent set of resources, including a predefined network topology, mandatory Azure Policy assignments (e.g., allowed locations), and specific role-based access control (RBAC) assignments for the security team. The solution must be repeatable, version-controlled, and allow the team to update the defined artifacts and apply updates to existing subscriptions. Which Azure service should the team use to define and deploy this collection of governance artifacts?

Which Azure service provides a serverless event routing service that connects event sources to event handlers?

A company stores critical financial data in Azure Blob Storage. The data must remain available even if an entire Azure region becomes unavailable. Additionally, the company needs the ability to read the data from the secondary region immediately during a regional outage, without waiting for Microsoft to initiate a failover. Which storage redundancy option should the company configure?

A large enterprise manages Azure subscriptions for three business units: Sales, Research & Development, and Information Technology. Each business unit has its own Azure subscription. The central governance team needs to ensure that a specific set of Azure Policy definitions (e.g., restricting allowed regions to 'East US' only) is applied to all current and future subscriptions belonging to these three business units. The team wants to minimize administrative overhead and ensure that any new subscription created for a business unit automatically inherits the same policies. Which Azure feature should the team use to achieve this goal?

A company stores sensitive customer transaction records in Azure Blob Storage. The records must be available for read access at all times, even if the primary Azure region becomes unavailable. The company initially configured geo-redundant storage (GRS). During a disaster recovery test, the operations team discovers that although data is replicated to a secondary region, they cannot read the data from the secondary region until a Microsoft-initiated failover occurs. The team needs a solution that provides immediate, continuous read access to the replicated data in the secondary region without waiting for a failover. Which Azure Storage replication option should the company use?

A company runs multiple projects in Azure, each project is placed in a separate resource group. The finance team wants to set a monthly spending limit of $10,000 per project and receive automated email alerts when a project's spending reaches 80% of the limit and again when it exceeds the limit. The solution must use native Azure capabilities and be configurable per resource group. Which Azure service should the finance team use?

A finance company is migrating a mission-critical trading application to Azure. The application must be resilient to a complete datacenter failure within the same Azure region. The solution should provide low-latency replication between separate physical locations with independent power, cooling, and networking. Which Azure feature should they use?

A company operates on-premises servers that they own. They are considering moving to Azure. Which cloud benefit would MOST directly reduce their total cost of ownership?

Arrange the steps to implement Azure Cost Management and set a budget.

Which Azure pricing model allows customers to pay less per hour by committing to a 1-year or 3-year term for Azure services like VMs and SQL Database?

A company is migrating its on-premises batch processing jobs to Azure. The jobs are triggered by file uploads to an on-premises file share. After migration, the files will be uploaded to Azure Blob Storage. The company wants a solution where code runs automatically whenever a new blob is created, with no requirement to manage servers or containers. The code must process the blob and then terminate. Compute resources should be used only when there is a file to process. Which Azure compute service should the company use?

A company is migrating its customer relationship management (CRM) system to a Software as a Service (SaaS) provider. The provider manages the application, runtime, middleware, and infrastructure. The company's IT security team is concerned about who is responsible for protecting the company's data and managing user access. Based on the shared responsibility model for cloud computing, which statement is correct?

Which Azure service provides network filtering to protect web applications from common exploits like SQL injection and cross-site scripting?

A company needs to ensure that all Azure resources have a mandatory 'CostCenter' tag. If a resource is created without this tag, the resource creation should be blocked. Which Azure Policy effect should they use?

A company wants to ensure that no one can create virtual machines without approval from the IT department. They want to block all VM creation attempts and notify the requester that they need to request access. Which Azure Policy effect should they use?

A company is designing a disaster recovery solution for an application hosted on Azure VMs. They want to replicate the VMs to a secondary Azure region and automatically failover if the primary region fails. Which Azure service should they use?

Which of the following is NOT a benefit of moving to the cloud?

A company has traditionally managed on-premises servers for their internal business applications. Setting up a new test environment involves ordering hardware, waiting for delivery, racking, and configuring the OS and applications, which typically takes two to three weeks. The company is migrating their development and testing workloads to Azure. Now, developers can deploy a complete, pre-configured test environment using Azure Resource Manager templates in under two hours. This ability to rapidly provision resources and adapt to changing requirements best illustrates which benefit of cloud computing?

Which Azure networking service enables you to create a hub-and-spoke network topology where multiple VNets are connected and can communicate through a central hub VNet?

Which Azure service provides a managed virtual desktop infrastructure (VDI) solution for deploying Windows desktops and apps from Azure?

A company is migrating a legacy application to Azure. The application stores data on a network file share that is accessed using the SMB protocol. After migration, multiple Azure virtual machines must be able to mount the same file share simultaneously. The company wants a fully managed service that eliminates the need to maintain a file server. Which Azure storage service should the company use?

What does 'manageability' mean as a benefit of cloud computing?

Which Azure networking service allows you to privately access Azure PaaS services from your virtual network using a private IP address?

Order the steps to deploy an Azure app service (Web App) with a custom domain.

A company has an Azure tenant with a management group hierarchy. The 'Production' management group contains five subscriptions used by the operations team. The IT security team wants to grant the 'Network Contributor' role to a group of network administrators for all subscriptions under the 'Production' management group. The role assignment must automatically apply to any new subscription added under the 'Production' management group in the future. The network administrators already exist as a security group in Azure AD. What is the most efficient way to achieve this?

What is the difference between the Azure portal and Azure CLI?

A company needs to run a batch job that processes large amounts of data nightly. The job requires hundreds of VMs for a few hours and then terminates. Which Azure service is BEST suited for this workload?

Which Azure networking service provides a private connection from an on-premises network to Azure without using the public internet?

Which Azure cost optimization practice involves analyzing resource usage and removing or resizing underutilized resources?

Which Azure feature automatically moves blob data between access tiers based on defined rules to optimize storage costs?

Which Azure service enables businesses to migrate and modernize their SQL Server databases to the cloud with built-in intelligence?

A multinational company has 10 Azure subscriptions, each managed by a different department. The central governance team wants to deploy a standardized environment that includes a specific network topology (virtual network, subnets, and network security groups), a set of Azure Policy definitions to enforce tagging and encryption, and a role assignment granting the 'Reader' role to a central security team in every subscription. The team must be able to update this standard definition in one place, and any changes should automatically apply to all existing deployments that were created from the definition. Which Azure service should they use?

A company is moving its IT infrastructure to the cloud to avoid large upfront hardware purchases and instead pay a predictable monthly fee. Which cloud benefit does this represent?

A company deploys a multi-tier web application on Azure. The web tier and database tier must be in the same region for low latency, but the database tier must be in a different subnet and have restricted network access from the web tier only. Which Azure network solution should they use?

Which benefit of cloud computing allows developers to test and deploy applications globally in minutes?

A company has 15 Azure subscriptions organized under multiple management groups. The security team has defined a standard set of 8 Azure Policy definitions that must be applied to every subscription. These definitions enforce required tags, deny creation of public IPs, require encryption for storage accounts, and restrict VM SKUs. The team wants to assign these policies as a single entity to simplify management and ensure consistent compliance. What should the team create and assign?

A retail company experiences fluctuating customer traffic throughout the year. During peak seasons, traffic can increase by 300% for a few weeks. The company wants to pay only for the compute resources it uses, without needing to invest in permanent infrastructure to handle peak loads. Which cloud computing characteristic best supports this requirement?

A company has multiple subscriptions. They want to apply a policy that denies creation of resources without a specific tag at the top-level management group. Later, they need to allow a specific subscription to create resources without that tag. What should they do?

Which Azure feature helps organizations maintain compliance by managing and auditing privileged access to Azure resources using just-in-time access?

A company runs a critical order-processing application on two Azure virtual machines in the West US region. The application must remain available even if an entire datacenter in that region experiences a complete outage. The company wants to place the two VMs in separate physical locations within the same region to provide fault tolerance against a datacenter-level failure. Which Azure feature should they use?

A company has three departments: Sales, Marketing, and IT. Each department has its own Azure subscription. The IT department manages all networking and security policies across all subscriptions. The Sales and Marketing departments should be able to create and manage their own resources but cannot modify networking or security policies. The IT department wants to apply a consistent set of policies (e.g., enforce tagging, restrict VM SKUs) across all subscriptions without needing to assign policies to each subscription individually. Additionally, the IT department wants to delegate administration of a specific custom role to a junior administrator who can assign that role to users within the Sales subscription only. Which combination of Azure governance features should the IT department use?

Which Azure governance tool provides a way to audit all changes made to resources in your Azure subscription?

A company wants to enforce that all Azure storage accounts must have encryption enabled. If a storage account is created without encryption, the policy should automatically enable encryption without manual intervention. Which Azure Policy effect should they use?

A company has multiple Azure subscriptions. The finance team needs to analyze spending trends and create budgets to prevent cost overruns. Which Azure tool should they use to visualize historical spending and set budget alerts?

A company has a policy that requires all storage accounts to have secure transfer enabled. They want to automatically audit all existing storage accounts and enforce the setting on new ones. They also want to automatically fix non-compliant new storage accounts. Which Azure Policy effect combination should they use?

A company needs to make their web application available with a custom domain name and SSL certificate. Which Azure service provides this capability for App Service?

A company needs to ensure that no resources in any subscription can be created without a specific cost center tag. Which Azure feature accomplishes this?

A company uses Azure Blueprints to define a standard environment for all new development subscriptions. The blueprint includes a set of Azure policies, role assignments, and resource templates. However, after applying the blueprint, some resources are created that do not comply with the policies. The company wants to be notified of these non-compliant resources without blocking their creation. Which Azure Policy effect should be used in the blueprint?

What is the primary advantage of deploying VMs across multiple Azure Availability Zones instead of a single Availability Set?

Which Azure service acts as a central networking hub connecting multiple virtual networks and on-premises networks together?

Which Azure service can detect faces in images and identify emotions, facial attributes, and recognize specific individuals?

A company runs a web application on Azure App Service. During a marketing campaign, the application's traffic surges to five times its normal level. The application is configured to automatically add more instances to handle the increased load and then remove them when demand returns to normal. This ability to dynamically provision and de-provision resources based on real-time demand is a direct example of which cloud computing characteristic?

What is the Azure Well-Architected Framework?

A company wants to deploy a web app that scales automatically based on demand. They do not want to manage any virtual machines or the underlying infrastructure. They only want to upload their code and let the platform handle everything. Which Azure compute service should they choose?

A financial services company is evaluating a public cloud provider. They are concerned about the shared responsibility model for security. The company must ensure that their customer data is encrypted at rest and in transit. Under the shared responsibility model, which security control is the cloud provider typically responsible for?

A company deploys three Azure virtual machines (VMs) that host a critical line-of-business application. All three VMs are located in the same Azure region. The company notices that during planned maintenance events triggered by the Azure platform, such as host OS updates, all three VMs are updated simultaneously, causing the application to become unavailable. The company requires that during such maintenance, at least two VMs remain running to preserve application uptime. Which Azure feature should the company implement to logically group the VMs and ensure they are updated in separate batches?

A company uses Azure Resource Manager templates to deploy infrastructure. They need to manage secrets such as database connection strings and passwords securely. Which Azure service should they use to store and retrieve these secrets during deployment?

A company needs to store and analyze large amounts of unstructured log data at low cost. Which Azure storage solution is MOST appropriate?

A company runs a nightly data processing job that requires high CPU usage for only 15 minutes. During the day, the compute resources are idle. The company wants to reduce costs by automatically starting compute resources only when the job runs and shutting them down after completion, without manual intervention. Which cloud computing characteristic directly meets this requirement?

A company deploys a line-of-business application on an Azure virtual machine. The IT team wants to ensure the application remains secure. According to the shared responsibility model, which of the following security tasks is the sole responsibility of the customer (the company)?

A company runs an e-commerce web application on a set of Azure virtual machines behind a load balancer. The application experiences unpredictable traffic surges during flash sales. The company configures an autoscale setting that automatically adds virtual machines when the average CPU usage across the existing VMs exceeds 75% for five minutes, and removes virtual machines when CPU usage drops below 30% for ten minutes. Which essential characteristic of cloud computing does this configuration primarily demonstrate?

A company plans to deploy a mission-critical application on three Azure virtual machines. The application must remain available even if an entire Azure datacenter becomes unavailable due to a catastrophic event like a fire or flood. The company wants to deploy the VMs across multiple physical locations within a single Azure region, with each location having independent power, cooling, and networking. Which Azure feature should the company use?

A company is evaluating moving their workloads to Azure. They currently operate a small on-premises data center. Their IT manager notes that by using Azure, they will benefit from the fact that Microsoft operates many large data centers globally, which allows them to achieve lower network bandwidth costs and hardware procurement discounts. The company will not have to negotiate separate contracts for power and cooling. Which cloud computing concept does this benefit best illustrate?

Which Azure service enables you to build, train, and deploy machine learning models using automated ML capabilities?

A startup wants to run a web application without managing the underlying servers. They only want to upload their code and let the cloud provider handle the runtime, scaling, and maintenance. Which cloud service model is this?

Which Azure service provides a globally distributed content delivery network with DDoS protection and Web Application Firewall capabilities?

Which Azure service provides a fully managed message queuing service for decoupling application components?

A company hosts a public-facing web application on Azure Virtual Machines in two separate Azure regions for disaster recovery. The application's domain is managed by a third-party registrar. The company needs a solution that can route user traffic to the nearest healthy regional endpoint based on geographic location and provides automatic failover if an entire region becomes unavailable. The solution should not inspect or modify the HTTP traffic (no SSL termination or web application firewall). Which Azure service should the company use?

A company runs a web application on Azure VMs. They want to distribute incoming traffic evenly across multiple VMs to ensure no single VM is overwhelmed. Which Azure load balancing solution should they use?

Which Azure service provides a secure way for applications running in Azure to access secrets and keys without storing credentials in code?

What does 'infrastructure as code' (IaC) mean in the context of Azure?

Which Azure storage service uses a flat namespace for storing objects and can host static websites?

A large enterprise has multiple Azure subscriptions for different departments. The central IT team wants to enforce a policy that restricts the Azure regions where resources can be deployed. The policy must automatically apply to all existing subscriptions and to any new subscriptions created in the future, without requiring manual assignment to each subscription individually. Which Azure feature should the central IT team use to achieve this hierarchical governance?

A company uses Azure SQL Database (PaaS). According to the shared responsibility model, who is responsible for applying security patches to the underlying operating system that runs the database service?

A company can provision virtual machines in Azure without submitting a request or waiting for hardware procurement. Which cloud characteristic does this describe?

What does an Azure Service Level Agreement (SLA) define?

Which Azure database service provides ACID-compliant transactional support with row-level locking, ideal for online retail order processing?

A company uses Azure Policy to govern its Azure environment. The governance team wants to enforce that all virtual machines (VMs) deployed in the production subscription use only approved operating system images from a specific Azure Compute Gallery. However, during a transition period, the team does not want to block the creation of VMs that use non-approved images; instead, they need to identify and report on any non-compliant VMs. They also want to track compliance over time. Which Azure Policy effect should the governance team use in the policy definition to meet these requirements?

Which Azure tool helps identify compliance issues by continuously evaluating your resource configurations against defined policies?

Which Azure service enables developers to add authentication and authorization to applications without writing the auth code themselves, supporting social identity providers and enterprise identity?

Which cloud computing benefit specifically refers to customers being able to access the latest technology without managing upgrades?

What type of data does Azure Table Storage store?

A company plans to migrate a line-of-business application to Azure virtual machines (IaaS). The company's security team is reviewing the shared responsibility model to determine which security tasks are handled by Microsoft. Which of the following security responsibilities belongs to Microsoft?

A company is moving to the cloud to achieve economies of scale. Which of the following best describes how cloud computing enables economies of scale?

A company has a policy that all Azure resources must have a 'CostCenter' tag. The governance team wants to identify any resources that are missing the tag without preventing their creation. They need a compliance report generated automatically showing all non-compliant resources. Which Azure Policy effect should they use?

A startup company plans to move its e-commerce application to Azure. The startup has limited upfront capital and expects demand to be unpredictable initially. The key requirement is that the company should only be charged for the compute and storage resources it actually uses, with the ability to pay per hour or per minute. This requirement directly maps to which fundamental benefit of cloud computing?

Which cloud computing characteristic allows a single set of physical hardware to serve multiple customers with isolated virtual environments?

Which Azure service provides low-cost, hot-standby disaster recovery for Azure VMs by replicating them to another region?

A company has virtual machines in a virtual network that run a critical internal application. IT administrators need to securely connect to these VMs from the internet for management purposes. They must not assign public IP addresses to the VMs, and they want to avoid managing SSH or RDP endpoints. Which Azure service should they use?

A company plans to deploy a web application on Azure Virtual Machines. The solution must remain available even if a physical datacenter in the region experiences a complete outage. The company wants to use the simplest and most cost-effective architecture that meets this requirement within a single Azure region. What should the company configure?

A web application experiences intermittent performance issues. A developer wants to see the exact path a user request takes through multiple services. Which Azure capability enables this?

A company is moving its on-premises data center to the cloud. Previously, they purchased servers and paid for maintenance. Now they pay a monthly subscription for compute and storage based on actual usage. This is an example of shifting from capital expenditure (CapEx) to which type of expenditure?

What is a Service Principal in Azure Active Directory?

Which Azure compute option lets you run pre-packaged applications from the Azure Marketplace with pre-configured OS and application software?

Which Azure service provides real-time translation of spoken conversations between participants speaking different languages?

A company has multiple Azure subscriptions used by different departments. The governance team has created several Azure Policy definitions to enforce tagging rules, restrict allowed VM SKUs, and require HTTPS for storage accounts. The team wants to assign these policies as a single, manageable unit to a management group so that they can track overall compliance across all subscriptions in that group from one dashboard. The compliance summary should show how many resources are compliant against all the combined policies. Which Azure feature should the team use?

A company has multiple Azure subscriptions organized under a management group hierarchy. They need to assign the 'Contributor' role to a security team for all subscriptions under the 'Production' management group. They also want new subscriptions added later to automatically inherit this role assignment. What should they do?

A company has an application running on Azure VMs across multiple availability zones to protect against data center failures. They need to distribute incoming traffic evenly across all VMs in a single region. Which Azure load balancing solution should they use?

An administrator needs to grant a user the ability to manage virtual machines in a specific resource group but NOT allow them to modify networking or storage. Which approach is BEST?

A company wants to encrypt data at rest in Azure SQL Database using customer-managed keys stored in Azure Key Vault. They also need to be able to rotate the keys without downtime. Which feature should they use?

What does 'pay-as-you-grow' mean in the context of cloud computing for a growing business?

A company plans to deploy a critical application in two Azure regions to ensure disaster recovery. The company wants to guarantee that during a major regional outage, the recovery region is physically separated from the primary region and that planned maintenance updates are rolled out sequentially to minimize downtime. Which Azure feature should the company leverage when selecting the secondary region?

A retail company runs an e-commerce application on Azure virtual machines during peak holiday seasons. The application experiences high traffic for a few weeks each year. The IT team wants to automatically provision additional compute resources during high demand and remove them when demand drops, ensuring that the company only pays for resources while they are actively in use. Which cloud computing characteristic does this approach primarily rely on?

A company hosts a customer relationship management (CRM) application on Azure virtual machines. The sales team needs to access the CRM from various locations, including the airport, home, and client offices, using company-issued laptops and personal mobile devices. The application is accessible via a standard web browser over the internet without requiring any special client software or dedicated network connections. Which fundamental characteristic of cloud computing does this scenario primarily demonstrate?

A company has a production resource group that contains several Azure virtual machines and a SQL database. The company wants to ensure that no user can accidentally delete these resources, but authorized administrators must still be able to modify the configuration and update the resources. The company needs a straightforward governance feature that can be applied directly to the resource group and can be removed only by an authorized user with the Owner role. Which Azure feature should the company use?

A company plans to deploy a mission-critical application on Azure virtual machines. The application must remain available if a single Azure datacenter fails. The company chooses to deploy the VMs in the East US Azure region. The solution should provide the highest availability within that single region. What should the company configure?

Which Azure service provides a platform for running Apache Spark analytics for big data processing with collaborative notebooks?

A company is evaluating moving its on-premises applications to the cloud. The IT manager wants to avoid upfront hardware costs and instead pay for resources on a monthly basis based on usage. Which cloud characteristic enables this financial model?

Which Azure service enables organizations to identify and classify sensitive data (like credit card numbers and passport numbers) stored in Azure?

A company has deployed several Windows and Linux virtual machines in an Azure virtual network. For security reasons, the virtual machines have no public IP addresses assigned. The IT administrators need to securely connect to these VMs using Remote Desktop Protocol (RDP) for Windows and Secure Shell (SSH) for Linux without deploying any additional agents on the VMs. The connection must be established directly from the Azure portal, and the service must provide protection against port scanning and brute-force attacks. Which Azure service should the company use?

A company is migrating a customer-facing web application to Azure. The application requires a relational database with built-in high availability, automatic backups, and automatic patching of the database engine. The development team is familiar with SQL Server and wants to minimize administrative overhead. They do not want to manage virtual machines or operating systems. Which Azure database service should the team choose?

A development team frequently needs to create and tear down test environments. In their on-premises datacenter, they must submit a ticket to the IT operations team, which often takes several days to provision the required servers. After migrating to Azure, developers can now create virtual machines, databases, and other resources directly through the Azure portal or using PowerShell scripts, without any interaction from the IT operations team. This ability to provision cloud resources directly is a direct example of which fundamental characteristic of cloud computing?

A company is migrating its on-premises virtual machines (VMs) to Azure using the Infrastructure as a Service (IaaS) model. The VMs run a custom legacy application that requires specific OS-level configurations. The company's IT team wants to understand which party is responsible for applying operating system security patches after the migration. According to the shared responsibility model, who is responsible for patching the OS of the Azure VMs?

A cloud provider purchases hardware in bulk and shares physical infrastructure among many customers, which allows them to offer lower prices per customer. This benefit is known as:

A company is designing a multi-cloud strategy to avoid dependency on a single provider. They need the ability to move workloads between different cloud providers or back to an on-premises environment with minimal rework. Which cloud characteristic is most essential for this goal?

A company currently budgets for maximum capacity to handle peak loads, resulting in underutilized resources during off-peak times. They want a model where they can quickly adjust resources up or down based on demand. Which cloud characteristic directly addresses this concern?

A company deploys two Azure virtual machines in an availability set. The application requires that at least one VM remains running during Azure platform-initiated maintenance, such as operating system updates to the underlying host. Which component of the availability set directly ensures that the VMs are not updated at the same time?

Which type of expenditure does cloud computing convert infrastructure costs into?

A company wants to use cloud services to quickly spin up a test environment for a new application, use it for a week, and then delete it. They want to minimize costs by only paying for the compute resources during that week. This scenario best describes which cloud characteristic?

A small business wants to migrate its IT infrastructure to Azure. The owner wants the ability to provision new virtual machines, storage accounts, and databases entirely through a web-based portal, without needing to submit a formal request or wait for an administrator to manually allocate resources. The owner expects resources to be available immediately after configuration. Which characteristic of cloud computing does this scenario best illustrate?

Which Azure compute option allows you to run code in response to events without provisioning or managing servers, and supports triggers from HTTP, timers, and Azure service events?

A company runs a legacy database on a single Azure virtual machine. The database is experiencing performance issues as the dataset grows. The IT team decides to increase the virtual machine size from Standard_D2s_v3 (2 vCPUs, 8 GB RAM) to Standard_D8s_v3 (8 vCPUs, 32 GB RAM) to improve performance. This process is an example of which cloud computing concept?

Which Azure service allows developers to store application configuration settings centrally and toggle feature flags?

A company runs a web application on Azure App Service. They want to improve performance by caching static content and frequently accessed data closer to users in different geographic locations. Which Azure service should they use?

Which Azure service provides IoT device management, real-time analytics, and bi-directional communication between IoT devices and the cloud?

Which Azure feature provides audit logs that record every action taken on secrets in Azure Key Vault?

A company needs to burst compute capacity during a seasonal sale event. They plan to use Azure virtual machines to handle the extra load and then release them after the event. They want to pay only for the extra resources used during that period. Which cloud characteristic best describes this?

A cloud provider offers resources on-demand and measures usage. Customers pay only for what they consume. Which characteristic of cloud computing is this?

A company has deployed several Azure virtual machines in a virtual network. The security policy requires that administrators must be able to connect to these VMs using Remote Desktop Protocol (RDP) from the Azure portal, but the VMs must not have any public IP addresses assigned. The company wants to minimize management overhead and avoid deploying additional jump-box virtual machines. Which Azure service should they use?

A company has an Azure subscription with 200 virtual machines. The compliance team requires that all virtual machines have diagnostic settings enabled to send metrics and logs to a central Log Analytics workspace. The team wants Azure to automatically configure these diagnostic settings on any VM that currently lacks them, without manual intervention. Which Azure Policy effect should the team use in the policy definition?

A company runs several Azure virtual machines and an Azure SQL Database in a single subscription. The operations team needs a single, personalized dashboard that displays the current health status of these specific resources, as well as any upcoming planned maintenance events from Microsoft that might affect them. The team wants to see all this information in one place without having to navigate multiple tools. Which Azure service should the operations team use to meet these requirements?

A company wants to move their on-premises infrastructure to the cloud to avoid the large upfront cost of purchasing new servers every three years. In the cloud, they will pay only for the server capacity they use, with no long-term commitment. This shift from upfront investment to variable expense is an example of which cloud benefit?

Which Azure service provides monitoring and diagnostics for virtual network traffic flows?

A company runs a web application in Azure that experiences variable traffic throughout the day. During peak hours, the application becomes slow because the existing virtual machine (VM) cannot handle the increased load. The solution architect proposes adding more VMs of the same size and distributing incoming requests across all of them to balance the load. Which scaling concept does this approach represent?

A company wants to ensure that all new Azure storage accounts have a specific encryption setting enabled. They also want to automatically remediate any existing non-compliant storage accounts without manual effort. Which Azure Policy effect should they use?

A company runs a mission-critical application on Azure virtual machines. The application is hosted in the East US Azure region. To protect against a regional disaster, the company configures Azure Site Recovery to replicate the VMs to a secondary region (West US). If a disaster occurs in East US, the company can initiate a failover to West US and bring the application back online within minutes using the replicated data. Which cloud computing benefit does this scenario best demonstrate?

Which Azure AI service converts spoken audio into text and text into spoken audio?

Which Azure AI service provides translation between more than 100 languages?

A company has a root management group that contains all Azure subscriptions. A centralized governance team needs to create and assign Azure Policy definitions and set initiatives that apply to all subscriptions. Which built-in role should be assigned to the governance team at the root management group scope to grant the minimum required permissions?

A company has an Azure subscription that contains hundreds of virtual machines (VMs) across multiple resource groups. The security team needs to enforce two governance rules: 1) All VMs must use managed disks. 2) All VMs must be deployed only in the East US region. The team wants to assign a single governance artifact that combines both rules so that the compliance state is evaluated as a group. The solution must not require assigning each rule individually. Which Azure feature should the team use to define and assign this combined set of rules?

Which Azure service enables automatic scaling of compute resources based on rules or schedules?

A company stores critical business data in an Azure Storage account. The data must remain available if a single Azure datacenter experiences a failure (e.g., fire, power outage). The company wants to minimize storage costs. Which storage redundancy option should they choose?

What is the purpose of Azure Resource Graph?

A company stores a critical database in Azure Blob Storage. The data must remain available even if an entire Azure datacenter fails. The company uses the East US region, which supports availability zones. They want the lowest-cost storage redundancy option that protects against a full datacenter failure while keeping all data within the East US region. Which redundancy option should they choose?

Which Azure support plan provides 24/7 access to technical support engineers by phone and email for production workloads?

Which type of cloud service model would a company typically use for hosting their own custom web application where they manage the code but not the server operating system?

A company has 10 Azure subscriptions used by different departments. The finance team wants to receive automated, prioritized recommendations to reduce cloud costs. Specifically, they want suggestions for identifying idle virtual machines and rightsizing underutilized resources across all subscriptions. Which Azure service should the finance team use to get these recommendations?

A hospital stores patient data in the cloud. The hospital is responsible for encrypting the data before uploading, managing user access, and complying with healthcare regulations. The cloud provider is responsible for securing the physical datacenter, network infrastructure, and hypervisor. This model describes which concept?

An Azure administrator needs to review all changes made to Azure resources over the past 90 days, including who made each change and when. Which Azure service provides this information?

A hospital is subject to strict data residency laws that require patient data to remain within the country's borders. They are considering using a public cloud provider. Which cloud deployment model would best meet this compliance requirement?

What is the purpose of Azure Availability Sets?

A company has multiple Azure subscriptions for different departments. They want to receive budget alerts when spending in any subscription exceeds 80% of the allocated amount. Which Azure feature enables them to set up these alerts?

A company uses Azure Blob Storage to store compliance documents that are required to be kept for 10 years. The documents are very rarely accessed; on average, only 2-3 requests per year are made, usually for audits. The company needs the lowest possible storage cost. When a document is requested, the company can tolerate a retrieval time of up to 15 hours. Which Azure Blob Storage access tier should the company use?

Which Azure database service provides a fully managed MariaDB database in the cloud?

A multinational company has a strict data residency requirement: all Azure virtual machines must be deployed only in the East US or West Europe Azure regions. The IT governance team wants to enforce this rule automatically so that any attempt to create a virtual machine in any other region is blocked immediately at the time of deployment. Users must receive a clear error message if they try to create a VM in a disallowed region. Which Azure feature should the governance team configure to meet this requirement?

Sequence the steps to implement Azure Policy to enforce compliance.

A company runs a legacy application on-premises that cannot be migrated to the cloud due to strict data sovereignty laws requiring customer data to remain within the country's physical borders. The company wants to use Azure's advanced analytics services to gain insights from the data. They plan to keep the data on-premises but run the analytics workloads in Azure. Which cloud deployment model should they use?

An e-commerce application needs to handle sudden traffic spikes during flash sales while maintaining consistent performance. Which combination of Azure services BEST addresses this requirement?

Which Azure service allows customers to extend Azure management and governance to non-Azure resources, including on-premises servers and other cloud providers?

Which Azure service provides real-time analytics on fast-moving streaming data from IoT devices and applications?

A company wants to ensure that all Azure resources are tagged with a 'CostCenter' tag at creation time. If a resource is created without the tag, it should be automatically denied. Which Azure Policy effect should they use?

A company is evaluating moving its on-premises datacenter to Azure. The CFO points out that Microsoft purchases servers, networking equipment, and cooling systems in enormous quantities, enabling them to negotiate lower prices from hardware vendors. The company expects to benefit from these lower hardware costs as it migrates. Which cloud computing benefit does this scenario primarily describe?

Which Azure service provides a SIEM (Security Information and Event Management) and SOAR (Security Orchestration, Automation, and Response) solution?

Which Azure service analyzes patterns in telemetry data from Azure IoT Hub to detect anomalies and predict when equipment will fail?

A company has three Azure subscriptions: one for the engineering department, one for marketing, and one for finance. The central IT team needs to apply a common set of Azure Policy definitions (e.g., allowed locations for resources) that must be enforced across all three subscriptions. Additionally, each department manager must be able to apply custom policies that only affect their own subscription. The IT team wants to organize the subscriptions into a hierarchy where they can assign the common policy at the top level and delegate custom policy assignment at the subscription level. Which Azure feature should the IT team use to create this hierarchical structure?

A company wants to ensure their application remains available even if an entire Azure region experiences an outage. Which Azure feature should they implement?

A company is considering moving its IT infrastructure to the cloud. The CFO wants to understand the financial impact: instead of purchasing servers and paying for maintenance, the company will pay a monthly fee based on usage. This shift represents moving from which type of expenditure to which?

What is 'fault tolerance' in cloud computing?

Which Azure compute option is best for running a batch processing job that can be interrupted and resumed without data loss, at the lowest possible cost?

A retail company hosts an e-commerce website on on-premises servers. During seasonal sales events, the website experiences traffic spikes that last for a few hours. Several years ago, the company purchased additional servers to handle these spikes, but those servers now sit idle for most of the year. The company is considering moving the website to Azure. Which benefit of cloud computing would most directly help the company avoid maintaining idle hardware while still being able to handle traffic spikes?

Which Azure compute option is BEST for a batch processing job that can tolerate interruptions and needs the lowest possible compute cost?

Which Azure service provides enterprise-grade, distributed message queuing with features like guaranteed delivery and FIFO ordering?

Which Azure service provides an enterprise messaging service with advanced features like topics, subscriptions, and dead-letter queues?

A company needs to ensure that all Azure resources in a subscription are created only in specific approved regions. Which Azure feature should they implement?

Which Azure service enables you to synchronize your on-premises Active Directory with Azure Active Directory?

A company uses Azure Policy to enforce encryption on storage accounts. They discover some existing storage accounts are non-compliant. They want to automatically enable encryption on these accounts without manual intervention. Which combination of policy effects should they use?

A company migrates its on-premises infrastructure to Azure. The IT manager notes that Azure dynamically allocates and reallocates compute and storage resources across multiple customers based on demand, while ensuring each customer's data and workloads remain isolated from others. Which cloud computing characteristic does this describe?

A company uses Azure for multiple workloads. The finance team wants to identify virtual machines that are consistently underutilized (average CPU usage below 5%) so they can reduce costs by resizing or shutting down those VMs. They want a built-in Azure tool that automatically analyzes resource usage and provides actionable recommendations. Which Azure service should they use?

Match each Azure storage type to its use case.

A healthcare organization migrates its patient data management application to Azure. The organization's compliance team learns that Azure's underlying physical infrastructure, including servers and storage, is shared by many customers globally. The team is concerned about data leakage and wants to understand which fundamental cloud computing characteristic allows the provider to share physical hardware among multiple tenants while ensuring that each tenant's data and compute resources remain logically isolated and secure from one another.

A company runs a critical transaction processing application on two Azure virtual machines. The infrastructure is designed so that if one virtual machine encounters a hardware failure and stops functioning, the other virtual machine continues to serve traffic without any interruption or loss of service. Which cloud computing characteristic does this design primarily address?

Match each Azure networking service to its purpose.

Which Azure service replicates on-premises virtual machines and physical servers to Azure for disaster recovery?

A company is developing a custom web application that will be deployed to Azure. The development team wants to minimize operational overhead and avoid any responsibility for managing the underlying operating system, runtime, or middleware. They want to focus solely on writing application code and managing data. Which cloud service model should the company use for this application?

A manufacturing company traditionally purchased and maintained its own servers, paying a large upfront capital expense (CapEx) for hardware that was expected to last five years. After migrating its workloads to Azure virtual machines, the company now receives a monthly invoice that reflects only the compute and storage resources actually consumed during that month. There are no upfront payments. This change in cost structure best illustrates which benefit of cloud computing?

Which Azure service enables you to securely connect remote users to Azure and on-premises resources using an SSL-based VPN?

Which Azure service provides a globally distributed, multi-model database service with single-digit millisecond read latency?

A company runs a web application on an Azure virtual machine. The application experiences periodic traffic surges during promotional campaigns. To handle the increased load, the IT team manually changes the VM size from Standard_D2s_v3 to Standard_D8s_v3 before each campaign and then changes it back after the campaign ends. Which cloud computing concept does this scenario exemplify?

A company runs a web application on Azure. At the end of each month, the finance team reviews an invoice that itemizes charges by resource type, such as virtual machine compute hours, storage capacity used, and data transfer volume. The total cost directly corresponds to the exact quantity of resources consumed during the billing period. This capability is an example of which fundamental characteristic of cloud computing?

A company wants to proactively identify Azure resources that are misconfigured and could lead to security vulnerabilities, such as virtual machines with open management ports or unencrypted storage accounts. They also need to get prioritized recommendations for remediating these issues. Which Azure service should the company use?

Which Azure identity feature automatically assigns permissions when a user joins a specific group, and removes them when they leave?

A company has a critical Azure resource group that contains all production virtual machines and databases. The IT security administrator wants to ensure that no user, including members of the 'Owner' role, can accidentally or intentionally delete this resource group. The solution must not prevent modification of resources inside the resource group. The administrator needs to apply a governance control at the resource group level. What should the administrator do?

Which of the following BEST describes the concept of 'security' as a cloud benefit?

A company needs to store large amounts of unstructured data, such as images and videos, for a web application. They need to access data from anywhere via HTTP/HTTPS. Which Azure storage service should they use?

Which Azure service provides pre-built AI capabilities like language understanding, vision, and speech without requiring custom model training?

A company runs a web application in two Azure regions: East US and West US. The company wants to route users automatically to the region that provides the lowest network latency. If one region becomes unavailable, all traffic should be rerouted to the healthy region. The company does not need to offload Transport Layer Security (TLS) or perform URL-based routing. Which Azure service should the company use to distribute traffic at the DNS level?

Which Azure AI service provides the ability to search, query, and extract insights from large document collections using AI?

A company uses Azure Policy to enforce governance rules across its Azure subscriptions. The security team wants to ensure that all virtual machines deployed in a subscription must be of an approved size from a predefined list. If a user attempts to deploy a virtual machine with a size not on the list, the deployment must be immediately blocked. Which Azure Policy effect should the company use in the policy definition?

A company wants to prevent any Azure resource from being accidentally deleted by anyone, including subscription owners. Which Azure feature accomplishes this?

What is the purpose of Azure Resource Manager (ARM)?

Which Azure service provides a way to automatically extract and load data from external SaaS applications like Salesforce and ServiceNow into Azure data stores?

Which Azure feature allows administrators to set a maximum spending limit to prevent unexpected charges on a subscription?

A company runs a web application on Azure virtual machines. The application experiences unpredictable traffic patterns with occasional sharp spikes. The operations team wants to configure the infrastructure so that the number of running virtual machines automatically increases during spikes and decreases during low traffic periods, without manual intervention. Which cloud computing characteristic does this requirement describe?

A startup frequently deploys identical environments for development, testing, and production. They want to ensure all deployments are consistent and follow best practices without manual configuration. They need a declarative JSON-based method to define the entire infrastructure (virtual machines, databases, networking) so that the same template can be reused across environments. Which Azure service should the startup use?

A company uses Azure Blob Storage to store archival backups of financial records. The company requires that the data is protected against a complete regional outage by replicating it to another Azure region. However, they do not need to access the replicated copy unless the primary region fails. The company wants to minimize storage costs while meeting this requirement. Which type of storage replication should the company configure?

A company needs to run a large-scale batch processing job that runs daily for several hours. The job can tolerate interruptions if compute capacity is reclaimed. They want to minimize compute costs. Which Azure compute service is most cost-effective for this scenario?

An IT administrator needs to query all Azure resources across multiple subscriptions to find all virtual machines that were created in the last 30 days. They want to use a powerful query language. Which Azure service should they use?

A company pays a monthly subscription fee for cloud services based on the resources they consume, such as the number of virtual machines or amount of storage used. There are no upfront costs or fixed long-term commitments. This pricing model is known as:

A company has a policy that all Azure resources deployed to production subscriptions must be tagged with a 'CostCenter' tag. They want to automatically prevent the creation of any resource that does not include this tag. Which Azure Policy effect should they use in their policy definition?

Which Azure service provides a managed Apache Kafka-compatible event streaming service for ingesting millions of events per second?

Which Azure feature automatically turns off virtual machines at a scheduled time daily to reduce development costs?

Company A deploys several Linux virtual machines (VMs) across multiple Azure availability zones in the West US region. The VMs run a cluster application that needs to read and write data concurrently to a shared file system. The solution must support the Server Message Block (SMB) protocol and must be accessible from all zones with low latency. Which Azure storage service should the company use?

A company is moving from an on-premises data center to the cloud. Previously, they paid a large upfront sum for hardware and then annual maintenance fees. Now they pay a monthly subscription based on actual usage of compute and storage. This shift represents moving from which type of expenditure to which?

What is the key difference between capital expenditure (CapEx) and operational expenditure (OpEx) in the context of cloud computing?

Which Azure service allows developers to build, train, and deploy machine learning models at scale using a managed cloud environment?

An organization needs to ensure that all Azure resources comply with internal standards and automatically remediate non-compliant resources. Which Azure service provides this capability?

A company migrates its web application to Azure App Service (PaaS) and its data to Azure SQL Database (PaaS). The company wants to understand which security responsibilities it retains after the migration. According to the shared responsibility model, which of the following responsibilities remains the responsibility of the company (customer) when using these PaaS services?

What is 'agility' in the context of cloud computing?

Which Azure service provides secure access to Azure virtual machines using an HTML5 browser-based RDP and SSH connection without requiring public IP addresses?

Which Azure feature provides Just-In-Time (JIT) VM access to reduce the attack surface of management ports?

A multinational company has multiple Azure subscriptions managed by different teams. The compliance team requires that all new virtual machines deployed in any subscription must have a specific tag (e.g., 'CostCenter') and must be deployed in approved regions only. They also want to automatically enforce these requirements without manual intervention. Which Azure service should the compliance team use to achieve this?

A company's data engineering team needs to process CSV files that are uploaded to an Azure Blob Storage container. For each uploaded file, the team must run a custom Python script to clean and transform the data. The team wants a solution that automatically triggers the script upon file upload, does not require them to manage any virtual machines or containers, and charges only when code executes. Which Azure service should the team use?

A company has an Azure subscription that contains production resources. The IT manager is concerned that a user who has the Contributor role might accidentally delete the entire subscription. The company wants a solution that prevents anyone from deleting the subscription, even users with the Owner role, while still allowing modifications to the resources inside the subscription. What should the administrator configure?

A company plans to use Azure Site Recovery to replicate on-premises virtual machines to Azure for disaster recovery. Due to regulatory restrictions, they cannot use the paired region and must replicate to a specific Azure region in the same continent. Can they select this non-paired region as the recovery target?

A company's finance team uses Azure Cost Management + Billing to monitor cloud spending. They want to configure a rule that sends an email notification to the finance team's distribution list when the monthly cost for resources tagged with Department=Marketing exceeds $10,000. Which Azure Cost Management feature should they configure?