TEST 2.pdf

You will be charged for resources used by VM Billing will continue according to SLA Test 2 Azure Active Directory cannot be used to provide access for company’s users to resources hosted on-promises. True False RL services is a large company that...

You will be charged for resources used by VM Billing will continue according to SLA Test 2 Azure Active Directory cannot be used to provide access for company’s users to resources hosted on-promises. True False RL services is a large company that wants to migrate to Azure. To ensure smooth migration, each department will have their own administrator to handle and manage the azure resources used in their departments. For Azure deployment to be successful, your colleague suggests creating multiple Azure Active Directory directories to allow Azure to be segmented for departments while keeping administrative effort to a minimum. Do you think your colleague’s suggestion is helpful? False True Subnets configured in Azure need public IP addresses for them to work. True False Azure Multifactor authentication can be used during Azure deployment to ensure administrative credentials remain hidden and encrypted. True False A company hosting a web server farm on azure have configured these servers to handle different types of traffic. Some servers have been optimized for video. If you were to advise on the type of  load balancer to use for all video request traffic to be sent to these optimized, which load balance would you recommend? Azure Load Balancer / Azure Application Gateway C-track runs most of its business online all over the world. To allow more accessible and quick access to their services, the system is distributed in various geographies worldwide. If you had to recommend a load balancer for their system, which one would you choose? Azure application gateway Azure traffic manager Azure load balancer Azure front door You have been assigned to a project where your team must create an environment to test an application. As a result, your team must deploy multiple virtual machines and install required packages that require more configurations. However, there is a concern regarding time involved for preparing the testing environment. What can the team do to speed the process? Use Azure Resource Manager Use Azure DevTest Labs Use GitHub Actions Use Azure DevOPS test Plans Is a standards-based, nonregulatory organization located in the United States. The National Institude of Standards and Technology You and other developers have decided to join forces to work on an open source development project which will help online community and keep technology moving in the right direction for future generations. Which of the following can be recommended? Azure Artifacts Azure DevOps Azure Boards GitHub Azure Reports Which of the following can be used to configure rules and policies in order to provide protection against exploitations: Azure firewall Load balancer Application gateway NSGs also have default rules applied to them to allow communication between resources in a virtual network. True False When creating a VNet in Azure, you need to provide a public IP add True False Application rules allow specific applications to be forwarded between network segments such as from the internet to Azure services. True False TF^ Azure networking falls under Azure’s core services True Vnets play a vital role In azure , but the only downfall is that they can only be configured for VM to VM connections. True False On top of providing a username and password on logging, you are still required to provide OTP code before access is granted. In this case, azure is making use of: Single factor authentication Victory services has built an IoT solution for a client who have some services in Azure. You have been assigned to work on this project to monitor device failures and device connections for the first two weeks of implementation to maintain health status of your IoT solution. Which of the following will be appropriate? Azure Logic Apps Azure IoT Hub Azure Cognitive services Azure Iot Central Which of the following is not a scenario for configuring VPN? All of the above  Your company wants to develop a web application solution for a client. This application will have a capability to process natural language and respond accordingly to the questions being asked. Which of the following should be used? Azure Cognitive Services Victory Services is a company that distributes IoT devices and implement IoT solutions for clients. You are newly appointed employee for Victory, and you have been asked to implement an IoT solution for a client that will allow you to regularly check the device performance and if necessary, analyse the data. Which of the following will be appropriate? Azure Bot Sphere Azure Sphere Azure ioT Central Azure Iot Hub TF^ Azure VNets don’t support subnetting Regions are connected using fiber User Access Administrator: This role can manage access to Azure resources. True PSG distributors is a global company with branches over all the world. To make it easy for their clients to access their services, it is advised that users should connect to their website closer to the location they reside. What would you configure in azure to fulfil this requirement? Configure Azure ExpressRoute Configure CDN Configure TTL on the web servers Configure Load balancing Is a non-profit, nonregulatory standards organization based in Geneva, Switzerland. International Organization for Standardization  After moving their services to azure, C-Track management decided to have redundancy by deploying their servers to multiple regions. To secure their traffic among the regions, azure VPN gateway can be used to create an appropriate VPN connection. Which of these VPN connections would you recommend for this scenario? Site-to-Site Multi-site Point-to-Point Vnet-to-Vnet Every time you need access to a resource, you are prompted to supply your login credentials. This does not fit your requirement and it is time consuming. You want to provide credentials only during login, thereafter you want to access any resource without a need to be re-authenticated. Which azure feature can allow this? Single Sign-On(SSO) Owner: This role has half access to all resources and can delegate access to others. The role applies to all resource types. Service Administrator and Co-Administrator roles have Owner permissions as the subscription scope. True You have been assigned to work on a project involving implementation of IoT solution. One of the requirements is to securely update the devices’ firmware remotely without being compromised. Which of the following will you recommend? Use Azure Resource Manager Use Azure DevTest Labs Use GitHub Actions Use Azure DevOps Test Plans When a company decides to use a hybrid cloud, in essence, the servers running in azure become an extension of the company’s LAN. What needs to be configured to make sure network traffic is kept secure between azure and on-premises data center?  Configure security on both side Configure VPN t encrypt traffic between the two sites Configure Azure firewall This service, which is part of Service Health, tracks the state of the resources you have deployed to Azure to give you visibility to any ongoing or historical issues with those resources. Resource Health NSGs enable you to filter network traffic between Azure resources in an Azure virtual network. True You are the Director of IT for your organization. Your CIO has asked you what methods or processes your organization should consider using to build out the capability to deploy large numbers of Azure resources with connected services and policies in a controlled way. Which of the following solutions should you recommend? ARM Templates Azure Portal Access to cloud azure active directory is done through the use of RBAC Defines data protection and privacy requirements as a regulation in European Union (EU) law. General Data Protection Regulation (GDPR) Azure function is a solution for Azure DevOps that helps simplify development and deployment of serverless, stateful function for data processing. False A company hosting their servers on azure would like to configure load balancing to allow traffic to be sent to data centers closer to where the user request has originated. Which type of load balancer would you recommend? Azure Application Gateway After migrating to Azure, C-Track deployed several database servers. To increase response time to data queries, it is advised to create a load balancer among the database servers. From the types of load balancers offered in Azure, which one would you recommend addressing this need? Azure Load Balancer PS hardware has branches in Cape town, Durban and Pretoria. The company has been looking at expanding their business into the cloud by capitalizing on internet shopping. The company has decided to go with azure and host a few servers in the cloud. The management would like the three branches to connect to their azure servers, which type of Azure VPN gateway would you recommend for this configuration to work?  Site-to-site Multi-site Point-to-site VNet-to-Vnet NSGs can filter traffic based on protocol, source IP address, source port, destination IP address, and destination port. True RL services is a large company that wants to migrate to Azure. To ensure smooth migration, each department will have their own administrator to handle and manage the azure resources used in their departments. For Azure deployment to be successful, your colleague suggests creating multiple Azure Active Directory directories to allow Azure to be segmented for departments while keeping administrative effort to a minimum. Do you think your colleague’s suggestion is helpful? False As with other Azure firewall services, you can create rules to determine which actions an NSG will take. False Azure Machine Learning can allow you to create AI models as both stand-alone applications in Azure or on premises. True False LA services is in the process of choosing whether to deploy ATP to detect threats directed to their company. However, one of the IT personnel seemed confused how will this help as he is not sure what threats can ATP detect. Which of the following will ATP help detect? Reconnaissance attack /Compromised credentials/ Lateral account movement/ Domain dominance PSN properties run their business mostly in the cloud, they still have some servers on premises at their HQ. The management of PSN would like the HQ to have connection to the servers being hosted in azure. Which VPN configuration would work for this configuration to work? Site-to-site Network boundaries can be protected through the use of authentication. False False An NSG can be scoped to a subnet or to a network interface on a VM, and a single NSG caapply to multiple VMs or subnets. True False Vnets play a vital role In azure , but the only downfall is that they can only be configured for VM to VM connections. True False GH wants to build an IoT solution that will allow communication between the IoT devices implemented and the services the company hosts in Azure. However, the company is more concerned about reliability and security when it comes to communication of IoT devices and hosted services in Azure. Which of the following will you recommend being used? Azure Iot Hub When a port an application uses is known, port filtering can be used to allow or block a service being provided. Select the correct port that can be configured to block all DNS requests 23 You are working for a company that has bought and installed internet-enabled devices to collect certain data. The company wants to monitor these devices, get an overall performance, and manage alerts should the maintenance be required on these devices. As an IT personnel, what will you recommend the company to use to achieve these requirements? Azure lot Central Reader: This role cannot view (consume) Azure resources. The role applies to all resource types. False Victory services recently won a tender to work on a project to deploy an artificial intelligence solution in the Azure. Your line manager requested the personnel suggest the solution that will build, test and deploy predictive analytics. What will be the most appropriate solution for this requirement? Azure Machine Learning You have been assigned to developers’ team that is responsible for creating Azure functions for different tasks. Your team leader wants to test your knowledge and asked you tell him more about Azure functions. Which of the following criteria can Azure firewall use to filter traffic? IP address, port, and/or protocol. You want to protect access to one of your network subnets, where your DHCP service is running. Select correct security to provide defence in depth: Physical Security Web browser firewall settings without any rule set will allow access to everyone. False To allow only web service access in a network, the following port(s) should be specified ports 80 (HTTP) 443 (HTTPS). This service tracks the state of your Azure services by region and gives you access to information about service issues, planned maintenance, health advisories, and security advisories in a customizable dashboard. Servive Health VPN is only used to connect users to azure but cannot be used between subnets in azure. False Victory has deployed multi-tier application to the cloud that is very important to the company. However, the company is concerned that the application may be vulnerable to DDoS attacks and wants you to recommend the solution that will prevent against these attacks while ensuring the application availability, generating reports and alerts. Which of the following will be appropriate solution to use? DDoS Protection Standard With Vnet address space 192.168.0.0/24, deriving subnets to accommodate 60 hosts will result in the following subnet addresses: 192.168.0.0/25 192.168.0.0/26 When it comes to azure load balancers, the term path-based routing refers to Routing traffic to the correct servers based on the informationin the URL