A company is planning on hosting a set of resources in Microsoft Azure.
They want to protect their resources against DDoS attacks and also get real time attack metrics.
Which of the following should the company select to meet this requirement?
DDoS Protection Basic
DDoS Protection Standard
DDoS Protection Premium
DDoS Protection Isolated
Answer is DDoS Protection Standard. DDoS Standard Protection provides additional mitigation capabilities over the Basic service tier that are tuned specifically to Azure Virtual Network resources. DDoS Protection Standard is simple to enable, and requires no application changes. Protection policies are tuned through dedicated traffic monitoring and machine learning algorithms. Policies are applied to public IP addresses associated to resources deployed in virtual networks, such as Azure Load Balancer, Azure Application Gateway, and Azure Service Fabric instances, but this protection does not apply to App Service Environments. Real-time telemetry is available through Azure Monitor views during an attack, and for history. Rich attack mitigation analytics are available via diagnostic settings. Application layer protection can be added through the Azure Application Gateway Web Application Firewall or by installing a 3rd party firewall from Azure Marketplace. Protection is provided for IPv4 and IPv6 Azure public IP addresses.
A company is planning on deploying resources to a Resource Group (RG) within Microsoft Azure.
The company is planning on assigning tags to the Resource Groups.
Would the resources in the Resource Group (RG) also inherit the same tags?
Yes
No
Answer is No. Resources in the Resource Group (RG) will not inherit the same tags because you apply tags to your Azure resources giving metadata to logically organize them into a taxonomy. Each tag consists of a name and a value pair. For example, you can apply the name "Environment" and the value "Production" to all the resources in production. After you apply tags, you can retrieve all the resources in your subscription with that tag name and value. Tags enable you to retrieve related resources from different resource groups. This approach is helpful when you need to organize resources for billing or management. It is important to note that Tags applied to the resource group are not inherited by the resources in that resource group.
A company is planning on deploying resources to a Resource Group (RG) within Microsoft Azure.
The company is planning on assigning permissions to the Resource Group (RG).
Would the resources within the Resource Group (RG) also inherit the same permissions?
Yes
No
Answer is Yes. The Resource Group (RG) will inherit the same permissions because permissions in the top level scope are automatically inherited to the level below – meaning subscription level users have the same permissions to the resource groups and the resource group level users have the same permission to the individual resources within the resource group.
This question requires that you evaluate the bold text to determine if it is correct.
"Authorization is the process of verifying a user’s credentials."
Instructions: Review the bold-italicized text. If it makes this statement correct, select “ No change is needed”. If this statement is incorrect, select the answer choice that makes the statement correct.
No change is needed
Authentication
Federation
Ticketing
Answer is Authentication. Authentication is the process of proving you are who you say you are. Authentication is sometimes shortened to AuthN.
Authorization is the act of granting an authenticated party permission to do something. It specifies what data you're allowed to access and what you can do with that data. Authorization is sometimes shortened to AuthZ.
Which of the following is true when it comes to SaaS (Software as a service)?
You are responsible for scalability of the solution
You are responsible for deploying the solution
You are responsible for configuring the solution
You are responsible for high availability of the solution
Answer is You are responsible for configuring the solution. Because SaaS provides a complete software solution that you purchase on a pay-as-you-go basis from a cloud service provider. You rent the use of an app for your organization, and your users connect to it over the Internet, usually with a web browser. All of the underlying infrastructure, middleware, app software, and app data are located in the service provider’s data center. The service provider manages the hardware and software, and with the appropriate service agreement, will ensure the availability and the security of the app and your data as well. SaaS allows your organization to get quickly up and running with an app at minimal upfront cost.
A company is planning on setting up an Enterprise Microsoft Azure Subscription.
Do they need to have a valid Microsoft account for associating the Azure Subscription?
Yes
No
Answer is Yes. Because an Enterprise Azure account is a global unique entity that gets you access to Azure services and your Azure subscriptions. You can create multiple subscriptions in your Azure account to create separation e.g. for billing or management purposes. In your subscription(s) you can manage resources in resources groups. Azure subscription can have a trust relationship with an Azure Active Directory (Azure AD) instance. But a valid Microsoft account is required to associate with the Azure Subscription.
An IT administrator for a company has been given a powershell script.
This powershell script will be used to create several Virtual Machines in Azure.
You have to provide a machine to the IT administrator for running the powershell script.
You decide to provide a Linux machine which has the Azure CLI tools installed.
Would this solution fit the requirement?
Yes
No
Answer is No. Because Azure PowerShell is basically an extension of Windows PowerShell. It lets Windows PowerShell users control Azure's robust functionality. From the command line, Azure PowerShell programmers use preset scripts called cmdlets to perform complex tasks like provisioning virtual machines (VMs) or creating cloud services.
An IT administrator for a company has been given a powershell script.
This powershell script will be used to create several Virtual Machines in Azure.
You have to provide a machine to the IT administrator for running the powershell script.
You decide to provide a ChromeOS based machine and use Azure Cloud Shell.
Would this solution fit the requirement?
Yes
No
Answer is Yes. Because Azure Cloud Shell is an interactive, authenticated, browser-accessible shell for managing Azure resources. It provides the flexibility of choosing the shell experience that best suits the way you work, either Bash or PowerShell, accessible via Chrome.
An IT administrator for a company has been given a powershell script.
This powershell script will be used to create several Virtual Machines in Azure.
You have to provide a machine to the IT administrator for running the powershell script.
You decide to provide a computer that has MacOS and Powershell 10.0 installed.
Would this solution fit the requirement?
Yes
No Most Voted
Answer is Yes. Because you can run PowerShell on Mac OS X. PowerShell is a command-prompt in your terminal window, so to start it: Start the Terminal application, Now you can simply type powershell as a command and this will start the PowerShell engine and move you from the bash prompt ($) to the PowerShell prompt (PS).
For more information, please reference:
https://docs.microsoft.com/en-us/powershell/azure/install-az-ps?view=azps-3.1.0
Question 220
A company is planning on setting up a solution in Microsoft Azure.
The solution would have the following key requirement:
An Integration solution for the deployment of code
Which of the following would be best suited for this requirement?
Azure Advisor
Azure Cognitive Services
Azure Application Insights
Azure Devops
Answer is Azure DevOps. Because it provides developer services to support teams to plan work, collaborate on code development, and build and deploy applications. Developers can work in the cloud using Azure DevOps Services or on-premises using Azure DevOps Server. Azure DevOps Server was formerly named Visual Studio Team Foundation Server (TFS).