├── README.md
├── 3_Management-and-Governance
    ├── 3.1_Cost-Managment
    │   └── README.md
    ├── 3.4_Monitoring-Tools
    │   └── README.md
    ├── 3.2_Tools-for-Governance-and-Compliance
    │   └── README.md
    └── 3.3_Tools-for-Deployment
    │   └── README.md
├── 1_Cloud_Concepts
    ├── 1.3_Cloud-Service-Types
    │   └── README.md
    ├── 1.2_Benefits_of_Use
    │   └── README.md
    └── 1.1_Cloud-Computing
    │   └── README.md
├── 2_Architecture-and-Services
    ├── 2.1_Core-Architecture
    │   └── README.md
    ├── 2.3_Storage-Services
    │   └── README.md
    ├── 2.4_Identity-Access-Security
    │   └── README.md
    └── 2.2_Compute-and-Networking-Services
    │   └── README.md
└── Practice-Problems
    ├── MS-Sample-Questions
        └── index.html
    └── MS-Practice-Assessment
        └── index.html


/README.md:
--------------------------------------------------------------------------------
 1 | # Microsoft Azure AZ-900 Certification Notes
 2 | 
 3 | Check [virtual training days](https://www.microsoft.com/en-us/trainingdays/azure) for any open seats for the fundamentals course. You will get a voucher to take the exam for free once you complete the course. They're usually filled up though. 
 4 | 
 5 | Notes are broken into sections as markdown files. You can read them directly on Github.  
 6 | 
 7 | Organized as per the [syllabus](https://query.prod.cms.rt.microsoft.com/cms/api/am/binary/RE3VwUY) from 02/25/2023 . Each section tries to directly answer the questions from the syllabus.  
 8 | 
 9 | There are some topics that may be on the exam that are not mentioned on the syllabus. I tried to include any I found in the notes.
10 | 
11 | Practice problems are html files because Github filters `<select>` tags in markdown. _It is best to view these files in a browser._ That way the answers are hidden but available to view on-click.


--------------------------------------------------------------------------------
/3_Management-and-Governance/3.1_Cost-Managment/README.md:
--------------------------------------------------------------------------------
 1 | ### Describe factors that can affect costs in Azure
 2 | - resource type
 3 | - consumption/usage
 4 | - maintenance (deprovisioning a VM but forgetting to do so for the other resources created with it)
 5 | - geography
 6 | - subscription type (e.g. trial account)
 7 | - Azure MarketPlace: allows use of third party vendor tools, which themselves may incur their own costs.
 8 |   
 9 | ### Compare the Pricing calculator and the Total Cost of Ownership (TCO) calculator
10 | The Pricing Calculator helps you determine the cost of deploying a resource in Azure. The TCO calculator tells you how much you would save after switching from your on-premises setup to one on Azure.  
11 | 
12 | ### Describe the Azure Cost Management and Billing tool
13 | Set up budgets, cost alerts, monitor and forecast your spending.
14 | 
15 | ### Describe the purpose of tags
16 | Tags are optional key-value pairs you can assign to resources to organize them. You can group by these tags to perform operations or to calculate costs.


--------------------------------------------------------------------------------
/1_Cloud_Concepts/1.3_Cloud-Service-Types/README.md:
--------------------------------------------------------------------------------
 1 | # Describe Cloud Service Types  
 2 | 
 3 | Summary: Know the differences between IaaS, PaaS, SaaS.  
 4 | 
 5 | ### Describe infrastructure as a service (IaaS)
 6 | Cloud responsible for:
 7 | - hardware
 8 | - network
 9 | - physical security
10 | 
11 | Client responsible for:
12 | - Everything else
13 | 
14 | Use-cases:
15 | - Lift-and-shift: Moving from on-premises to data centers hosted by CSPs
16 | - For quickly setting up testing or development environments
17 |   
18 | ### Describe platform as a service (PaaS)
19 | Cloud responsible for:
20 | - same as IaaS and
21 | - maintaining development environment infrastrucure (OS and DB updates and maintenance)
22 | 
23 | Use-cases:
24 | - Create apps using built-in software components, reduce amount of code to write
25 | - Built-in analytics and BI
26 | 
27 | ### Describe software as a service (SaaS)
28 | Renting a fully developed application.
29 | 
30 | Examples:
31 | - Email and messaging
32 | - Finance and expense tracking
33 | - Business productivity apps
34 | 


--------------------------------------------------------------------------------
/3_Management-and-Governance/3.4_Monitoring-Tools/README.md:
--------------------------------------------------------------------------------
 1 | ### Describe the purpose of Azure Advisor
 2 | **Azure Advisor** is a service that monitors and makes suggestions on improving reliability, security, performance, efficiency/best-practices, and cost.  
 3 | 
 4 | ### Describe Azure Service Health
 5 | **Azure Service Health** is a service where you can monitor the health of Azure as a whole, as well as your individual resources.	Service Health is the name of the service that tracks status (e.g. service outages, planned maintenance) by region. Resource Health tracks health of your own resources. You can also keep a history of previous incidences to catch potential trends in service outages.    
 6 | 
 7 | ### Describe Azure Monitor, including Log Analytics, Azure Monitor alerts, and Application Insights
 8 | **Azure Monitor** is a platform for gather data, analyzing, and even acting on your Azure resources.   
 9 | 
10 | **Log Analytics** lets you run queries on the logs that are created by Azure Monitor.  
11 | 
12 | **Azure Monitor** lets you set thresholds that if reached will send you a notification. These thresholds can be based on log data, or metrics on individual resources (e.g. your VM has over 80% CPU usage).  
13 | 
14 | **Application Insights** is a way of gathering data for your web applications, such as request rates, page views, and user/session counts. Application Insights comes with an SDK that you can install in your app.  
15 | 
16 | 
17 | 


--------------------------------------------------------------------------------
/3_Management-and-Governance/3.2_Tools-for-Governance-and-Compliance/README.md:
--------------------------------------------------------------------------------
 1 | ### Describe the purpose of Azure Blueprints
 2 | They're ways to define a template on the subscription or resource group level.  
 3 | 
 4 | Blueprints are composed of _artifacts_. Artifacts are like the attributes of a blueprint, and can be a policy assignment, role assignment, or Azure Resource Manager template (infrastructre as code, explained in next section). 
 5 | 
 6 | Blueprints can be versioned to keep track of updates made to the blueprint.  
 7 | 
 8 | ### Describe the purpose of Azure Policy
 9 | Enables you to define individual policies or groups of policies, aka initiatives. They help track whether any of your resources don't comply to a policy, or prevent noncompliant resources from being created in the first place. Azure Policies can be set at the resource, resource group, subscription, or management group level, and are inherited.  
10 | 
11 | ### Describe the purpose of resource locks
12 | Resource locks are intended to prevent the accidental deletion or update of a resource. There are two types of locks:
13 | 1. prevents update but allow deletion
14 | 2. read-only, prevents update and deletion.  
15 | 
16 | Resource locks can be removed, and must be removed to permit the prohibited behavior.  
17 | 
18 | ### Describe the purpose of the Service Trust Portal
19 | Contains documents on Microsoft security, privacy, and compliance practices. You may have to review and accept a non-disclosure agreement to access certain compliance materials.  
20 | 


--------------------------------------------------------------------------------
/3_Management-and-Governance/3.3_Tools-for-Deployment/README.md:
--------------------------------------------------------------------------------
 1 | ### Describe the Azure portal
 2 | A GUI for managing your resources and deployments on Azure. You can create custom dashboards to focus on the services most important to you. Since they're present in every data center, they are highly resilient and available.  
 3 | 
 4 | ### Describe Azure Cloud Shell, including Azure CLI and Azure PowerShell
 5 | **Cloud Shell** is a browser-based shell. You can access this shell from the Azure portal. Since you'll already be logged in from the portal, you won't have to authenticate yourself when doing stuff.  
 6 | 
 7 | Azure Cloud Shell provides two different interfaces: **Azure Powershell** and **Azure CLI** (bash-based). Besides the syntax, there's supposedly no significant difference between using Powershell and CLI.  
 8 | 
 9 | ### Describe the purpose of Azure Arc
10 | **Azure Arc** allows you to manage resources outside of Azure in one place, such as on-premises servers in a hybrid environment or resources from other Cloud providers in a multicloud environment.  
11 | 
12 | ### Describe Azure Resource Manager and Azure Resource Manager templates (ARM templates)
13 | **Azure Resource Manager** (ARM) is the API used for managing any and all resources, whether it's a request made from the portal, Azure Shell, or SDKs.  
14 | 
15 | **ARM templates** allow for infrastructure as code, where a single or collection of JSON files can declare how you want your resources deployed. This enables consistent deployments (i.e. if you had to deploy some resources more than once, you can be confident they're set up the same each time).  
16 | 
17 | 


--------------------------------------------------------------------------------
/2_Architecture-and-Services/2.1_Core-Architecture/README.md:
--------------------------------------------------------------------------------
 1 | ### Describe Azure regions, region pairs, and sovereign regions
 2 | 
 3 | An **Azure region** is a geographical designation of several physical data centers. Some regions have **availability zones** which are themselves (smaller) geographical designations of one or more data centers. Each availability zone is able to run on its own, so that if one goes down, any data that's been replicated will still be available in another availability zone of the same region.  
 4 | 
 5 | **Region pairs** are two regions that, in the case of a natural disaster or some other occurrence that may affect an entire region, can compensate for the other when one goes down. Not all region pairs are two-way, some are one-way. Region pairs must be _at least_ 300 miles away from each other.  
 6 | 
 7 | **Sovereign regions** are Azure instances that are isolated from the "main" Azure instance, and are used for organizations that need to comply with certain regulations.  
 8 | 
 9 | 
10 | ### Describe Azure resources and resource groups
11 | Resources are the "fundamental" unit in Azure. A VM instance is an Azure resource. Resource groups are collections of resources. 
12 | 
13 | - A resource must be part of a resource group
14 | - A resource can _only_ be part of a single resource group
15 | - Properties of the resource group get inherited by all the resources it contains
16 |   
17 | ### Describe subscriptions
18 | A way of organizing resources in terms of 
19 | 1. billing
20 | 2. access
21 | 
22 | Subscriptions can be comprised of multiple resouce groups, and any property assigned to a subscription will also be assigned to the resource groups.
23 | 
24 | ### Describe management groups
25 | Management groups have one or more subscriptions.
26 | 
27 | ### Describe the hierarchy of resource groups, subscriptions, and management groups
28 | In order of descending specificity:
29 | resouce -> resouce group -> subscription -> management group
30 | 


--------------------------------------------------------------------------------
/2_Architecture-and-Services/2.3_Storage-Services/README.md:
--------------------------------------------------------------------------------
 1 | ### Compare Azure storage services
 2 | The Azure Storage platform offers several services, all of which are accessible by HTTP/HTTPS and client libraries, and encrypt the data their storing.  
 3 | 
 4 | 1. Blob storage: unstructured data, like AWS S3.
 5 | 2. Azure Files: file shares accessible by Server Message Block (SMB) or Network File System (NFS) protocols.
 6 | 3. Queue storage: for messages.
 7 | 4. Disk storage: disk storage for Azure VMs.  
 8 | 
 9 | ### Describe storage tiers
10 | Storage tiers are configuration parameters you can define at the resource or account level that indicate the frequency with which you access your data.  
11 | - Hot access tier: For frequent access. Lowest cost for reads for highest cost for storage.
12 | - Cold access tier: For storage accessed roughly once a month.  
13 | - Archive access tier: For storage accessed roughly once a year. Lowest cost for storage, highest cost for reads.  
14 | 
15 | ### Describe redundancy options
16 | 1. Locally Redudant (LRS): Three copies in a single data center. 11-nines durability (99.999999999%) over a year.
17 | 2. Zone Redundant (ZRS): Replicated across three AZ in your primary region. 12-nines durability. 
18 | 3. Geo-redundant (GRS): LRS in two data centers that are in region pairs (i.e. a primary and secondary region). 16-nines durability.
19 | 4. Geo-zone Redundant (GZRS): ZRS in the primary region and LRS in secondary region. 16-nines durability.  
20 | 5. Read-Access GRS, Read-Access GZRS: Allows reads from secondary region even if primary region is up and running.  
21 | 
22 | • Describe storage account options and storage types
23 | ### Identify options for moving files, including AzCopy, Azure Storage Explorer, and Azure File Sync
24 | **AzCopy** is a command line tool for moving files to and from locally, between storage accounts, and even between cloud service providers. You can also synchronize files (uni-directionally) so that all files saved in a source location gets moved to a target location automatically.  
25 | 
26 | **Azure Storage Explorer** is a GUI that uses AzCopy under the hood to do the same things.  
27 | 
28 | **Azure File Sync** can be installed locally and allows for bi-directional file synchronization.  
29 | 
30 | ### Describe migration options, including Azure Migrate and Azure Data Box
31 | **Azure Migrate** is a migration service that helps assess a migration prior to it happening, as well as does the migrating over a network.  
32 | **Azure Data Box** is for migrating data offline. Suitable for migrating data over 40TB and you have little or no network capabilities. They send you an actual hard drive that they transport back to a data center.  
33 | 
34 | 


--------------------------------------------------------------------------------
/2_Architecture-and-Services/2.4_Identity-Access-Security/README.md:
--------------------------------------------------------------------------------
 1 | ### Describe directory services in Azure, including Microsoft Azure Active Directory (Azure AD), part of Microsoft Entra and Azure Active Directory Domain Services (Azure AD DS)
 2 | 
 3 | **Azure AD** is a cloud based directory service. It's used to control access to cloud resources, uses OAuth or SAML authentication.  
 4 | 
 5 | **Azure AD DS** is a domain service that allows the use of older authentication methods (Kerberos/NTLM) for legacy applications. A domain service is a way of organizing resources into units that have a delegated "admin" user.   
 6 | 
 7 | ### Describe authentication methods in Azure, including single sign-on (SSO), multifactor authentication, and passwordless
 8 | SSO requires you provide a username and password just once, without having to reauthenticate each time you use a different service.  
 9 | 
10 | MFA adds an additional requirement to a username and password, such as a security question, code sent to a mobile device, or biometric data like a fingerprint or face-scan.  
11 | 
12 | Passwordless authentication requires you register your device, and from there you just provide a PIN or fingerprint to be authenticated. Microsoft Authenticator app has both MFA and passwordless functionality. 
13 | 
14 | ### Describe external identities and guest access in Azure
15 | Consumers of your Microsoft resources don't have to be part of your organization, or even have MS accounts. They can use credentials from some other provider to authenticate themselves. The maintainer of the MS resources is still responsible for authorization, which can be managed through Azure AD.  
16 | 
17 | ### Describe Conditional Access in Microsoft Azure Active Directory (Azure AD)
18 | Through Azure AD, access can be granted or revoked based off signals like the user's identity, device, or location. Instead of outright blocking the user, you can also require the user provide an additional form of authentication (MFA).
19 | 
20 | ### Describe Azure role-based access control (RBAC)
21 | Instead of assigning the same permissions to users manually, you can create roles belie a collection of permissions and then assign that role to a _scope_. A scope can be a management group, subscription, resource group, or resource.  
22 | 
23 | ### Describe the concept of Zero Trust
24 | Authenticate every time. Give minimal permissions required. Deny by default.  
25 | 
26 | ### Describe the purpose of the defense in depth model
27 | A layered approach to security. Starting from the outermost layer:
28 | - Physical: secure the hardware
29 | - Identity & Access: always authentiate
30 | - Perimeter: protect from DDoS attacks
31 | - Network: inbound and outbound internet access should be limited
32 | - Compute: VM's should be protected (e.g. require SSH)
33 | - Application: remove security vulnerabilities within your application 
34 | - Data: protect the database or disk storage
35 | 
36 | ### Describe the purpose of Microsoft Defender for Cloud
37 | Built-in for cloud services. Three components:
38 | 1. Continuously Assess: automatically run vulnerability scans
39 | 2. Secure: set security policies and follow compliance best practices through Azure Security Benchmark
40 | 3. Alerts: get notified, suggested remediation steps, option to trigger logic in response to an alert.


--------------------------------------------------------------------------------
/1_Cloud_Concepts/1.2_Benefits_of_Use/README.md:
--------------------------------------------------------------------------------
 1 | # Benefits of Using Cloud Services
 2 | 
 3 | **Summary**: Be able to describe the difference between the benefits of availability, scalability, reliability, predictability, governence/security, and manageability.
 4 | 
 5 | ### Describe the benefits of high availability and scalability in the cloud
 6 | **High Availability**  
 7 | Cloud-hosted applications are expected to be highly available.     
 8 | 
 9 | Availability can be measured in percent-uptime. The higher the percent, the more it costs.  
10 | 
11 | Depending on the service, Azure has different uptime guarantees. These guarantees are defined in documents called _Service Level Agreements_ (SLAs) that are published [periodically](https://www.microsoft.com/licensing/docs/view/Service-Level-Agreements-SLA-for-Online-Services?lang=1).  
12 | 
13 | If they don't meet this guarantee, they offer a _service credit_ as a percentage of the fees paid for that service. For example, if the monthly uptime percentage of the basic Azure Active Directory service falls under 99.9% but above 99%, you get a 25% service credit.  
14 | 
15 | 99% monthly uptime = 7.2 hours per month downtime  
16 | 99.9% monthly uptime = 43.2 minutes per month downtime 
17 | 
18 | **Scalablity**  
19 | Scalability refers to how CSPs can adjust the resources used to meet demand. If there's a sudden surge in demand, Azure can manually or automatically provision more resources to meet the demand. If resources are not being fully utilized, Azure can also scale down to cut costs.  
20 | 
21 | There are two types of scaling: 
22 | 1. Vertical: Increase/decrease the computing power of a single virtual machine.  
23 | 2. Horizontal: Adding/removing virtual machines or containers to meet demand.  
24 | 
25 | ### Describe the benefits of reliability and predictability in the cloud
26 | **Reliability**  
27 | Copies of your resources are deployed to various regions, meaning that if any single region goes down, your resources are still available.  
28 | 
29 | The term "resilient" is also used to describe this feature.  
30 | 
31 | **Predictability**  
32 | Predictable performance and cost.  
33 | 
34 | - Performance: auto-scaling, load-balancing (i.e. distribute network traffic "evenly" so that no single resource is stressed), being highly available.
35 | - Cost: Track expenditures in real time, apply data analytics to forecast and plan resource. Azure has a _Total Cost of Ownership_ (TCO) [calculator](https://azure.microsoft.com/en-us/pricing/tco/calculator/) for figuring out how much your resource deployments would cost.  
36 | 
37 | ### Describe the benefits of security and governance in the cloud
38 | Azure offers ways for users to more easily adhere to corporate and government regulatory standards, for example by notifying if a service is out of compliance, or perfoming automatic software updates.  
39 | 
40 | PaaS and SaaS services manage the security software updates for you, while IaaS allow users to manage it themselves.  
41 | 
42 | ### Describe the benefits of manageability in the cloud
43 | The "what" and "how" of managing cloud resources. The training module calls these "management of" vs "management in" as the what and how, respecitively.  
44 | 
45 | **What**
46 | - Autoscaling
47 | - Preconfigured templates
48 | - Health monitoring
49 | - Alerts on performance metrics
50 | 
51 | **How**
52 | - web portal
53 | - CLIs
54 | - APIs 
55 | - PowerShell
56 | 
57 | ## Additional Reading  
58 | 
59 | - [Building great solutions with Microsoft Azure Well-Architected Framework](https://learn.microsoft.com/en-us/training/paths/azure-well-architected-framework/) (learning module)
60 | 


--------------------------------------------------------------------------------
/1_Cloud_Concepts/1.1_Cloud-Computing/README.md:
--------------------------------------------------------------------------------
 1 | # Introduction to Cloud Computing
 2 | 
 3 | 
 4 | ### Define cloud computing.
 5 | Computing services provided over the internet.
 6 | 
 7 | ### Extra: Give examples of computing services.
 8 | 1. Compute power: Pay for the amount of RAM and quality of processor.
 9 | 2. Storage: Pay for how much disk space you use. Added bonus of easily replicating data across several servers. 
10 | 
11 | ### Extra: Difference between RAM and processor.
12 | RAM is the maximum "quantity" of work your computer can do at any given time. The processor is the speed at which you do the work.
13 | 
14 | ### Extra: Why would I use a cloud service provider?
15 | - Pay only for the services used. 
16 | - Don't have to manage your own hardware resources.
17 | - Scale or de-scale quickly.
18 | 
19 | ### Describe the shared responsibility model.
20 | The responsibilities of maintaining your cloud-hosted applications are shared between you and the cloud service provider.  
21 | 
22 | How those responsibilities are split depend on the service you use.  
23 | 
24 | The consumer will _always_ be responsible for the data you store, as well as who can access the data and on what kind of device (e.g. cell phone, computer, etc.).  
25 | 
26 | The CSP will _always_ be responsible for the physical data center, physical host (i.e. the computer itself, I think), and physical network.
27 | 
28 | _Infrastructure as a Service (IaaS)_ is a service giving minimal responsiblity to the CSP.  
29 | _Software as a Service (SaaS)_ gives minimal responsiblity to the user.  
30 | _Platform as a Service (PaaS)_ falls somewhere in between.  
31 | 
32 | ### Extra: What responsibilities fall "in-between" a IaaS and SaaS?
33 | 1. Identity infrastructue management (e.g. if you use Azure Active Directory vs Auth0 for identity management)
34 | 2. Applications
35 | 3. Network controls (i.e. who can access your cloud-hosted resources on a network level)
36 | 4. Operating System (i.e. choosing the underlying OS, updating it, etc.)
37 | 
38 | ### Extra: Is the Azure Virtual Machines (VM) service SaaS, PaaS, or IaaS?
39 | IaaS because the user must update and secure the OS, manage network-level accessibility, provide any applications hosted on the VM, and specify how identity management will be provided.
40 | 
41 | ### Define cloud models, including public, private, and hybrid.
42 | Cloud models "define the deployment type of cloud resources." They're the "types" of clouds, where a cloud is just a collection of services provided via the internet. 
43 | 
44 | 1. private: A private cloud is only used by a single organization. 
45 | 	- The data centers can be hosted on-site or by a third-party. 
46 | 	- You data isn't colocated with data from other orgs, which may be required (e.g. HIPAA).
47 | 	- More control but also more costly.
48 | 2. public: A cloud built, controlled, and maintained by a CSP.
49 | 	- Less control but cost advantages from economies of scale (i.e. hardware resources purchased in "bulk" by CSP, savings distributed to consumers)
50 | 3. hybrid: A cloud utilizing both private and public clouds.
51 | 	- Start with private cloud, then surges in demand can be handled by public cloud (because they're quicker to set up).
52 | 
53 | ### Extra: What is multicloud?
54 | Using multiple CSPs. You may want to use a mish-mash of services. Or you may be migrating from one CSP to another.  
55 | 
56 | ### Compare cloud pricing models.
57 | 2 types:
58 | 
59 | 1. Capital expenditure: Pay up-front, saves money if you know your costs ahead of time.
60 | 2. Operational expenditure: On-demand payment, can pay for more resources if needed and stop paying for resources that aren't used.
61 | 
62 | CSPs are OpEx.
63 | 
64 | 


--------------------------------------------------------------------------------
/2_Architecture-and-Services/2.2_Compute-and-Networking-Services/README.md:
--------------------------------------------------------------------------------
 1 | ### Compare compute types, including container instances, virtual machines (VMs), and functions
 2 | VMs require an OS to be "bundled" with it, so it takes longer to spin up than a container. Containers offer less control but are easier to scale than VMs because they're lighter weight. Azure functions are event-driven and a serverless compute service. They can be cheaper than VMs or containers because they don't need to be constantly up and running. You're only charged for when the Azure function has to respond to an event.  
 3 | 
 4 | ### Describe VM options, including Azure Virtual Machines, Azure Virtual Machine Scale Sets, availability sets, and Azure Virtual Desktop
 5 | 
 6 | Azure VMs is an IaaS service that provides the ability to create virtual machines. 
 7 | 
 8 | **VM Scale Sets** allow you to create _and manage_ multiple VMs that are configured the same, are load balanced, and are provisioned/de-provisioned according to demand (automatically or on a pre-configured schedule). 
 9 | 
10 | **VM Availability Sets** are groupings of VMs to promote high availability. The two ways it groups VMs are by 
11 | - update domain: Group VMs so that every VM in the group can reboot at the same time during an update without compromising availability. Only one update domain would be rebooted at a time.  
12 | - fault domain: Group VMs so that each group has a separate power source and network switch. Protects against power and network failures.
13 | 
14 | **Azure Virtual Desktop** 
15 | Hosts a Windows desktop on the cloud that's accessible across devices and OS's.  
16 | 
17 | - User login to this desktop can be managed from Azure AD.
18 | - Supports multi-session windows 10 or 11 deployment, which regular VMs can't do.
19 | 
20 | ### What is Azure Batch? 
21 | A platform for that creates and manages a pool of virtual machines, intended for large-scale _parallel_ and _high-performance computing_.
22 |   
23 | 
24 | ### Describe application hosting options, including the Web Apps feature of Azure App Service, containers, and virtual machines
25 | If you want to host a web application, web api, or mobile application, you can do so using VM's or containers.  
26 | 
27 | You can also use **Azure App Service**, which will come with the following things built in:
28 | - continuous deployment from a Git repo
29 | - secured endpoints
30 | - auto-scaling
31 | - load balancing
32 | - supports multiple programming languages
33 | 
34 | ### Describe virtual networking, including the purpose of Azure Virtual Networks, Azure virtual subnets, peering, Azure DNS, Azure VPN Gateway, and Azure ExpressRoute
35 | Virtual networks are what allow your resources to communicate with each other, and to your on-premises servers.  
36 | 
37 | An **Azure Virtual Network** (Azure vNet) is one of the first things you have to create because other resources must assign themselves to a vNet. Each vNet is designated a bunch of IP addresses. 
38 | 
39 | Each vNet is specific to a region. If you need an application to be available across regions you need to create multiple vnNets.  
40 | 
41 | Azure virtual **subnets** are ways to split up your vNet. Each subnet has its own subset of IP addresses designated to it from the vNet. The resources you deploy, such as virtual machine, has to be assigned to a specific subnet.  
42 | 
43 | A **Point-to-Site VPN Gateway** is how a secure connection is established between an Azure VNet and an individual computer.  
44 | 
45 | **VNet peering** and **Azure VPN Gateway** are means by which Azure vNets can communicate with each other. The latter is also called a **Site-to-Site VPN Gateway** and can also connect an onsite vnet to an Azure vnet and encrypts messages passed between them.  
46 | 
47 | **Azure ExpressRoute** is a way to connect vnets without using the public internet. The three models that ExpressRoute supports are:  
48 | - CloudExchange colocation
49 | - Point-to-point Ethernet connection 
50 | - Any-to-any connection
51 | 
52 | **The main difference between Azure ExpressRoute and S2S VPN Gateway is that the former is _not_ over the internet, while the latter is**.
53 | 
54 | Vnets also allow you to filter network traffic using **security groups**. You can specify which IP addresses and protocols can access a subnet by configuring the security group it's assigned to.  
55 | 
56 | **Azure DNS** is a domain hosting service. It offers the benefits of 
57 | - anycast networking: DNS queries are answered by the closest available DNS server.
58 | - control who has access via Azure role-based access control
59 | - logs to monitor modifications to a resource
60 | - resource locking
61 | - private DNS domains so you can come up with custom domain names in your VPNs
62 | 
63 | Azure DNS hosts domains for record management, **but you can't register a domain name using Azure DNS**. 
64 | 
65 | ### Describe Virtual Private Networks (VPNs)
66 | A VPN is an encrypted tunnel over within another network, usually an untrusted one like the internet. VPN Gateways are VPN implementations that come in two forms:
67 | - policy-based
68 | - route-based
69 | 
70 | Only a single VPN gateway can be deployed per VNet, but it can connect to multiple targets (i.e. other VNets, on-premises data centers).  
71 | 
72 | To maintain high availability, VPN gateways have several configuration options. By default, they are configured to be `active/standby` where two instances of VPN gateways are deployed, one that's active and another that's a "backup".
73 | 
74 | 


--------------------------------------------------------------------------------
/Practice-Problems/MS-Sample-Questions/index.html:
--------------------------------------------------------------------------------
  1 | <!DOCTYPE html>
  2 | <html lang="en">
  3 | <head>
  4 |     <meta charset="UTF-8">
  5 |     <meta http-equiv="X-UA-Compatible" content="IE=edge">
  6 |     <meta name="viewport" content="width=device-width, initial-scale=1.0">
  7 |     <title>MS Sample Questions</title>
  8 | </head>
  9 | <style>
 10 |     ul {
 11 |         list-style: none;   
 12 |     }
 13 | </style>
 14 | <body>
 15 |    <h2>Sample Questions from Microsoft's website</h2>
 16 |     <p>Prepared by <a href="https://github.com/roshmadosh/azure-az900-notes">hiroshi nobuoka</a> on Feb 28, 2023.</p>
 17 |    <a href="https://learn.microsoft.com/en-us/certifications/resources/az-900-sample-questions">source</a> 
 18 |    <div class="question">
 19 |         <p><b>1.</b> Which Azure Active Directory feature is used to provide access to resources based on organizational policies?</p>
 20 |         <ul>
 21 |             <li>A. multi-factor authentication (MFA)</li>
 22 |             <li>B. single sign-on (SSO)</li>
 23 |             <li>C. administrative units</li>
 24 |             <li>D. Conditional Access</li>
 25 |         </ul>
 26 |         <select>
 27 |         <option>
 28 |         View answer
 29 |         </option>
 30 |         <option>
 31 |         D. not sure how "organizational policies" is meant to be interpreted. Conditional Access is an authentication method based on signals, such as the user's identity, location, or device.
 32 |         </option>
 33 |         </select>
 34 |    </div>
 35 |    <div class="question">
 36 |         <p><b>2.</b> Single sign-on (SSO) is __________ method that enables users to sign in the first time and access various applications and resource by using same password.</p>
 37 |         <ul>
 38 |             <li>A. a validation</li>
 39 |             <li>B. an authentication</li>
 40 |             <li>C. a configuration</li>
 41 |             <li>D. an authorization</li>
 42 |         </ul>
 43 |         <select>
 44 |         <option>
 45 |         View answer
 46 |         </option>
 47 |         <option>
 48 |         B. SSO is an authentication tool that prevents the need for repeated sign-ins when accessing multiple services. 
 49 |         </option>
 50 |         </select>
 51 |    </div>
 52 |    <div class="question">
 53 |         <p><b>3.</b> Match the services to the correct descriptions.</p>
 54 |         <ul>
 55 |             <li>A. Pricing Calculator</li>
 56 |             <li>B. TCO calculator</li>
 57 |             <li>C. Cost management</li>
 58 |         </ul>
 59 |         <ol>
 60 |            <li>Estimates workload costs</li> 
 61 |            <li>Estimates the cost savings by comparing datacenter costs to running the same workload on Azure</li>
 62 |            <li>Helps control, analyze, and optimize workload costs</li>
 63 |         </ol>
 64 |         <select>
 65 |         <option>
 66 |         View answer
 67 |         </option>
 68 |         <option>
 69 |         A -> 1, B -> 2, C -> 3
 70 |         </option>
 71 |         </select>
 72 |    </div>
 73 |    <div class="question">
 74 |         <p><b>4.</b>__________ is a repeatable set of governance tools that helps development teams quickly build and create new environments while adhering to organizational compliance to speed up development and deployment.</p> 
 75 |         <ul>
 76 |             A. Azure DevOps <br>
 77 |             B. A Continuous Integration/Continuous Deployment (CI/CD) pipeline configuration <br> 
 78 |             C. Azure Blueprints <br>
 79 |             D. Azure Policy <br>
 80 |         </ul> 
 81 |         <select>
 82 |         <option>
 83 |         View answer
 84 |         </option>
 85 |         <option>
 86 |         C. 
 87 |         </option>
 88 |         </select>
 89 |    </div>
 90 |    <div class="question">
 91 |         <p><b>5.</b> Match the services to the correct descriptions.</p>
 92 |         <ul>
 93 |             A. IaaS <br>
 94 |             B. PaaS <br> 
 95 |             C. SaaS <br> 
 96 |         </ul> 
 97 |         <ul>
 98 |             1. Provides hosting and management of an application and its underlying infrastructure, as well as any maintenance, upgrades, and security patching <br>
 99 |             2. Provides a fully managed environment for developing, testing, delivering, and managing cloud-based applications <br> 
100 |             3. Provides servers and virtual machines, storage, networks, and operating systems on a pay-as-you-go basis <br> 
101 |         </ul>
102 |         <select>
103 |         <option>
104 |         View answer
105 |         </option>
106 |         <option>
107 |         A -> 3, B -> 2, C -> 1.
108 |         </option>
109 |         </select>
110 |    </div>
111 |     <div class="question">
112 |         <p><b>6.</b>__________ is a repeatable set of governance tools that helps development teams quickly build and create new environments while adhering to organizational compliance to speed up development and deployment.</p> 
113 |         <ul>
114 |             A. Public cloud <br>
115 |             B. Private cloud <br>
116 |             C. Hybrid cloud <br>
117 |             D. On-premises datacenter <br>
118 |         </ul> 
119 |         <select>
120 |         <option>
121 |         View answer
122 |         </option>
123 |         <option>
124 |         C, key words 'cloud' with 'on-premises'.
125 |         </option>
126 |         </select>
127 |    </div>
128 |     <div class="question">
129 |         <p><b>7.</b>__________ copies data to a secondary region from the primary region across multiple datacenters that are located many miles apart.</p>
130 |     
131 |         <ul>
132 |             A. Premium storage <br>
133 |             B. Zone redundant storage (ZRS) <br>
134 |             C. Geo-redundant storage (GRS) <br>
135 |             D. Locally-redundant storage (LRS) <br>
136 |         </ul> 
137 |         <select>
138 |         <option>
139 |         View answer
140 |         </option>
141 |         <option>
142 |         C. 
143 |         </option>
144 |         </select>
145 |    </div>
146 |     <div class="question">
147 |         <p><b>8.</b>Which option is used to set the communication between an on-premises VPN device and an Azure VPN gateway through an encrypted tunnel over the internet?</p>
148 | 
149 |         <ul>
150 |             A. ExpressRoute <br>
151 |             B. Point-to-Site (P2S) VPN <br>
152 |             C. Site-to-Site VPN <br>
153 |        </ul> 
154 |         <select>
155 |         <option>
156 |         View answer
157 |         </option>
158 |         <option>
159 |          C
160 |         </option>
161 |         </select>
162 |    </div>
163 |     <div class="question">
164 |         <p><b>9.</b>You use __________ to organize resources in an Azure subscription.</p>
165 | 
166 |         <ul>
167 |             A. Azure regions <br>
168 |             B. Resource groups <br>
169 |             C. Management groups <br>
170 |             D. Administrative units <br>
171 |        </ul> 
172 |         <select>
173 |         <option>
174 |         View answer
175 |         </option>
176 |         <option>
177 |         B
178 |         </option>
179 |         </select>
180 |    </div>
181 |     <div class="question">
182 |         <p><b>10.</b>Which defense in depth layer uses distributed denial of service (DDoS) protection?</p>
183 | 
184 |         <ul>
185 |             A. Physical Security Layer<br>
186 |             B. Perimeter Layer <br>
187 |             C. Network layer <br>
188 |             D. Application layer<br>
189 |         </ul> 
190 |         <select>
191 |         <option>
192 |         View answer
193 |         </option>
194 |         <option>
195 |         B 
196 |         </option>
197 |         </select>
198 |    </div>
199 |     <div class="question">
200 |         <p><b>11.</b>Which Azure serverless computing technology provides the ability to execute workflows to automate business scenarios by using triggers without writing any code?</p>
201 | 
202 |         <ul>
203 |             A. Azure Functions <br>
204 |             B. Azure Logic Apps<br>
205 |             C. Azure Front Door<br>
206 |             D. Azure DevOps<br>
207 |         </ul> 
208 |         <select>
209 |         <option>
210 |         View answer
211 |         </option>
212 |         <option>
213 |         B. Sorry didn't have a section for this. Logic Apps let you run automated workflows with minimal code. 
214 |         </option>
215 |         </select>
216 |    </div>
217 |     <div class="question">
218 |         <p><b>12.</b>What can you use to launch the Azure Cloud Shell?</p>
219 | 
220 |         <ul>
221 |             A. Azure portal <br>
222 |             B. Azure PowerShell <br>
223 |             C. Azure Command Line Interface (CLI) <br>
224 |             D. Azure Resource Manager (ARM) template <br>
225 |         </ul> 
226 |         <select>
227 |         <option>
228 |         View answer
229 |         </option>
230 |         <option>
231 |         A 
232 |         </option>
233 |         </select>
234 |    </div>
235 |     <div class="question">
236 |         <p><b>13.</b>__________ enables you to scale to thousands of virtual machines for high-performance computing and large-scale parallel jobs. </p>
237 | 
238 |         <ul>
239 |             A. An Azure virtual machine scale set <br>
240 |             B. An availability set <br>
241 |             C. Azure Batch <br>
242 |             D. An availability zone <br>
243 |         </ul> 
244 |         <select>
245 |         <option>
246 |         View answer
247 |         </option>
248 |         <option>
249 |         C. Key words 'parallel' and 'high-performance computing'. 
250 |         </option>
251 |         </select>
252 |    </div>
253 |     <div class="question">
254 |         <p><b>14.</b>Match the services to the correct descriptions. </p>
255 | 
256 |         <ul>
257 |             A. Azure Resource Locks<br>
258 |             B. Azure Blueprints <br>
259 |             C. Azure Policy<br>
260 |         </ul> 
261 |         <ul>
262 |             1. Rapidly provisions and runs new environments with the knowledge that they are in line with the organization’s compliance requirements. <br>
263 |             2. Enforces standards and assess compliance across your organization <br>
264 |             3. Prevents resources from being accidentally deleted or changed <br>
265 |         </ul>
266 |         <select>
267 |         <option>
268 |         View answer
269 |         </option>
270 |         <option>
271 |         A -> 3, B -> 1, C -> 2
272 |         </option>
273 |         </select>
274 |    </div>
275 |     <div class="question">
276 |         <p><b>15.</b>__________ enables you to provision a group of matching and load-balanced virtual machines in Azure. </p>
277 | 
278 |         <ul>
279 |             A. Azure Logic Apps <br>
280 |             B. An availability set <br>
281 |             C. An Azure virtual machine scale set <br>
282 |             D. Azure Load Balancer <br>
283 |         </ul> 
284 |         <select>
285 |         <option>
286 |         View answer
287 |         </option>
288 |         <option>
289 |         C 
290 |         </option>
291 |         </select>
292 |    </div>
293 |     <div class="question">
294 |         <p><b>16.</b>__________in Azure enables you to deploy Azure resources close to the users. </p>
295 | 
296 |         <ul>
297 |             A. Elasticity <br>
298 |             B. Scalability <br>
299 |             C. Geo-distribution <br>
300 |             D. High availability <br>
301 |         </ul> 
302 |         <select>
303 |         <option>
304 |         View answer
305 |         </option>
306 |         <option>
307 |         C 
308 |         </option>
309 |         </select>
310 |    </div>
311 |     <div class="question">
312 |         <p><b>17.</b>__________ is supported by ExpressRoute for connecting an on-premises network to Azure. </p>
313 | 
314 |         <ul>
315 |             A. A Point-to-Site VPN <br>
316 |             B. A point-to-point Ethernet connection <br>
317 |             C. A Site-to-Site VPN <br>
318 |             D. Azure Peering service <br>
319 |         </ul> 
320 |         <select>
321 |         <option>
322 |         View answer
323 |         </option>
324 |         <option>
325 |         B 
326 |         </option>
327 |         </select>
328 |    </div>
329 |     <div class="question">
330 |         <p><b>18.</b>Which Azure feature enables you to organize multiple subscriptions in hierarchies for unified policies and compliance? </p>
331 | 
332 |         <ul>
333 |             A. Resource groups <br>
334 |             B. Management groups <br>
335 |             C. Azure Active Directory (Azure AD) <br>
336 |             D. Azure Container Instances <br>
337 |         </ul> 
338 |         <select>
339 |         <option>
340 |         View answer
341 |         </option>
342 |         <option>
343 |         B 
344 |         </option>
345 |         </select>
346 |    </div>
347 |     <div class="question">
348 |         <p><b>19.</b>__________ alerts you when service issues occur in an Azure environment, such as a regional Azure outage that affects all Azure customers. </p>
349 | 
350 |         <ul>
351 |             A. Azure Monitor
352 |             B. Azure Advisor
353 |             C. Azure Service Health
354 |             D. Azure Application Insights
355 |         </ul> 
356 |         <select>
357 |         <option>
358 |         View answer
359 |         </option>
360 |         <option>
361 |         C 
362 |         </option>
363 |         </select>
364 |    </div>
365 |     <div class="question">
366 |         <p><b>20.</b>Match the services to the correct desriptions.</p>
367 | 
368 |         <ul>
369 |             A. Authorization <br>
370 |             B. Authentiation <br>
371 |         </ul> 
372 |         <ul>
373 |             1. Confirms the identity of a person who wants access<br>
374 |             2. Grants the proper access to a legitimate user<br>
375 |         </ul> 
376 |         <select>
377 |         <option>
378 |         View answer
379 |         </option>
380 |         <option>
381 |         A -> 2, B -> 1 
382 |         </option>
383 |         </select>
384 |    </div>
385 | 
386 | 
387 | 
388 | 
389 | 
390 | 
391 | 
392 | 
393 | 
394 | 
395 | 
396 | </body>
397 | </html>


--------------------------------------------------------------------------------
/Practice-Problems/MS-Practice-Assessment/index.html:
--------------------------------------------------------------------------------
  1 | <!DOCTYPE html>
  2 | <html lang="en">
  3 | <head>
  4 |     <meta charset="UTF-8">
  5 |     
  6 |     <meta name="viewport" content="width=device-width, initial-scale=1.0">
  7 |     <title>Microsoft Practice Assessment for AZ-900</title>
  8 |     <style>
  9 |         body {
 10 |             font-family: Arial, Helvetica, sans-serif;
 11 |             color: ghostwhite;
 12 |             background: #2f2f2f;
 13 |         }
 14 |         ul {
 15 |             list-style: none;
 16 |         }
 17 |         li {
 18 |             margin-bottom: 2ch;
 19 |         }
 20 |         .question {
 21 |             margin-bottom: 4ch;
 22 |         }
 23 |         select {
 24 |             margin-left: 4ch;
 25 |         }
 26 |         b {
 27 |             margin-right: 1ch;
 28 |         }
 29 |     </style>
 30 | </head>
 31 | 
 32 | <body>
 33 |     <h1>MS's Practice Assessment</h1>
 34 |     <p>Prepared by <a href="https://github.com/roshmadosh/azure-az900-notes">hiroshi nobuoka</a> on Feb 28, 2023.</p>
 35 |     <p>50 practice questions. If you want to take the assessment directly, click below and find the link that says "Take a free practice assessment."</p>
 36 |     <a href="https://learn.microsoft.com/en-us/certifications/exams/az-900/">source</a>
 37 |     <h2>Questions</h2>
 38 |     <div class="question">
 39 |         <p><b>1.</b>Which two factors affect Azure costs? Each correct answer presents a complete solution.</p> 
 40 |         <ul>
 41 |             <li>A. availability zone selection</li>
 42 |             <li>B. resource usage</li>
 43 |             <li>C. resource location</li>
 44 |             <li>D. date and time of use</li>
 45 |         </ul>
 46 |         <select>
 47 |         <option>
 48 |         View answer
 49 |         </option>
 50 |         <option>
 51 |         B, C
 52 |         </option>
 53 |         </select>
 54 |    </div>
 55 |     <div class="question">
 56 |         <p><b>2.</b>You need to compare the costs of running an application in an on-premises datacenter with the costs of running the application in Azure. What should you use to assist you? </p>
 57 | 
 58 |         <ul>
 59 |             <li>A. Azure Pricing calculator</li>
 60 |             <li>B. Azure Advisor</li>
 61 |             <li>C. Azure Cost Mgmt</li>
 62 |             <li>D. TCO Calculator</li>
 63 |         </ul>
 64 |         <select>
 65 |         <option>
 66 |         View answer
 67 |         </option>
 68 |         <option>
 69 |         D
 70 |         </option>
 71 |         </select>
 72 |    </div>
 73 |     <div class="question">
 74 |         <p><b>3.</b>What are two characteristics of a consumption-based model? Each correct answer presents a complete solution. </p>
 75 | 
 76 |         <ul>
 77 |             <li>A. no upfront costs</li>
 78 |             <li>B. the ability to stop paying for resources that are no longer needed </li>
 79 |             <li>C. upfront costs</li>
 80 |             <li>D. capital expenditures</li>
 81 |         </ul>
 82 |         <select>
 83 |         <option>
 84 |         View answer
 85 |         </option>
 86 |         <option>
 87 |         A, B
 88 |         </option>
 89 |         </select>
 90 |    </div>
 91 |     <div class="question">
 92 |         <p><b>4.</b>You plan to build a new solution in Azure that will use platform as a service (PaaS) products. What should you use to estimate the monthly costs? </p>
 93 | 
 94 |         <ul>
 95 |             <li>A. TCO calculator</li>
 96 |             <li>B. Azure Pricing calculator</li>
 97 |             <li>C. Azure Advisor</li>
 98 |             <li>D. Azure Cost Mgmt</li>
 99 |         </ul>
100 |         <select>
101 |         <option>
102 |         View answer
103 |         </option>
104 |         <option>
105 |         B, keyword is to 'estimate' cost of a 'planned' solution.
106 |         </option>
107 |         </select>
108 |    </div>
109 |     <div class="question">
110 |         <p><b>5.</b>You need to associate the costs of resources to different groups within an organization without changing the location of the resources. What should you use? </p>
111 | 
112 |         <ul>
113 |             <li>A. resource tags</li>
114 |             <li>B. resource groups</li>
115 |             <li>C. subscriptions</li>
116 |             <li>D. administrative units</li>
117 |         </ul>
118 |         <select>
119 |         <option>View answer</option>
120 |         <option>A</option>
121 |         </select>
122 |    </div>
123 |     <div class="question">
124 |         <p><b>6.</b>What can you use to ensure that new and existing Azure resources stay in compliance with corporate standards?</p>
125 | 
126 |         <ul>
127 |             <li>A. Azure Policy</li>
128 |             <li>B. resource locks</li>
129 |             <li>C. resource tags</li>
130 |             <li>D. Azure Advisor</li>
131 |         </ul>
132 |         <select>
133 |         <option>View answer</option>
134 |         <option>A</option>
135 |         </select>
136 |    </div>
137 |     <div class="question">
138 |         <p><b>7.</b>What can you use to restrict the deployment of a virtual machine to a specific location? </p>
139 | 
140 |         <ul>
141 |             <li>A. Azure AD</li>
142 |             <li>B. resource locks</li>
143 |             <li>C. Azure Policy</li>
144 |             <li>D. resource groups</li>
145 |         </ul>
146 |         <select>
147 |         <option>View answer</option>
148 |         <option>C, two questions with the same answer :(</option>
149 |         </select>
150 |    </div>
151 |     <div class="question">
152 |         <p><b>8.</b>What can you use to ensure that a development team can only create virtual machines of a certain size?</p>
153 | 
154 |         <ul>
155 |             <li>A. Azure Blueprints</li>
156 |             <li>B. Azure Policy</li>
157 |             <li>C. Cloud Adoption Framework</li>
158 |             <li>D. Conditional Access</li>
159 |         </ul>
160 |         <select>
161 |         <option>View answer</option>
162 |         <option>B, three options with the same answer >:O</option>
163 |         </select>
164 |    </div>
165 |     <div class="question">
166 |         <p><b>9.</b>Which tool is accessible via Azure Cloud Shell and allows you to write Bash scripts to manage an Azure environment? </p>
167 | 
168 |         <ul>
169 |             <li>A. Azure Powershell</li>
170 |             <li>B. ARM templates</li>
171 |             <li>C. Azure Repos</li>
172 |             <li>D. Azure CLI</li>
173 |         </ul>
174 |         <select>
175 |         <option>View answer</option>
176 |         <option>D</option>
177 |         </select>
178 |    </div>
179 |     <div class="question">
180 |         <p><b>10.</b>What can you use to create resources in Azure and includes a validation step to ensure that all the resources can be created in the proper order based on dependencies, in parallel and idempotent? </p>
181 | 
182 |         <ul>
183 |             <li>A. ARM templates</li>
184 |             <li>B. Azure CLI</li>
185 |             <li>C. Azure Powershell</li>
186 |             <li>D. Azure REST API</li>
187 |         </ul>
188 |         <select>
189 |         <option>View answer</option>
190 |         <option>A</option>
191 |         </select>
192 |    </div>
193 |     <div class="question">
194 |         <p><b>11.</b>Which two tools can you use to create a new Azure virtual machine from a mobile device that runs Android? Each correct answer presents complete solution.</p>
195 | 
196 |         <ul>
197 |             <li>A. Azure portal</li>
198 |             <li>B. ssh</li>
199 |             <li>C. Remote Desktop</li>
200 |             <li>D. Azure Powershell</li>
201 |         </ul>
202 |         <select>
203 |         <option>View answer</option>
204 |         <option>A, D</option>
205 |         </select>
206 |    </div>
207 |     <div class="question">
208 |         <p><b>12.</b>You have a team of Linux administrators that need to manage the resources in Azure. The team wants to use the Bash shell to perform the administration. What should you recommend? </p>
209 | 
210 |         <ul>
211 |             <li>A. Azure Blueprint</li>
212 |             <li>B. Azure CLI</li>
213 |             <li>C. Azure Powershell</li>
214 |             <li>D. ARM template</li>
215 |         </ul>
216 |         <select>
217 |         <option>View answer</option>
218 |         <option>B, repeat answer :(</option>
219 |         </select>
220 |    </div>
221 |     <div class="question">
222 |         <p><b>13.</b>Which Azure service evaluates Azure resources and makes recommendations to help improve reliability, security, and performance, achieve operational excellence, and reduce costs?</p>
223 | 
224 |         <ul>
225 |             <li>A. Azure Monitor</li>
226 |             <li>B. Azure Service Health</li>
227 |             <li>C. Log Analytics</li>
228 |             <li>D. Azure Advisor</li>
229 |         </ul>
230 |         <select>
231 |         <option>View answer</option>
232 |         <option>D, keyword 'recommendations'</option>
233 |         </select>
234 |    </div>
235 |     <div class="question">
236 |         <p><b>14.</b>You need to review the root cause analysis (RCA) report for a service outage that occurred last week. Where should you look for the report? </p>
237 | 
238 |         <ul>
239 |             <li>A. Azure Service Health</li>
240 |             <li>B. Azure Advisor</li>
241 |             <li>C. Azure Monitor</li>
242 |             <li>D. Log Analytics</li>
243 |         </ul>
244 |         <select>
245 |         <option>View answer</option>
246 |         <option>A, keywords 'service outage'</option>
247 |         </select>
248 |    </div>
249 |     <div class="question">
250 |         <p><b>15.</b>Which issues require that you take action to avoid service interruptions, such as service retirements and breaking changes? </p>
251 | 
252 |         <ul>
253 |             <li>A. health advisories</li>
254 |             <li>B. service issues</li>
255 |             <li>C. application insights </li>
256 |             <li>D. Kusto queries</li>
257 |         </ul>
258 |         <select>
259 |         <option>View answer</option>
260 |         <option>A, i don't understand this one either</option>
261 |         </select>
262 |    </div>
263 |     <div class="question">
264 |         <p><b>16.</b>What can you use to monitor outages in a specific Azure region?</p>
265 | 
266 |         <ul>
267 |             <li>A. Azure Advisor</li>
268 |             <li>B. Azure Security Advisor</li>
269 |             <li>C. Azure Monitor</li>
270 |             <li>D. Azure Service Health</li>
271 |         </ul>
272 |         <select>
273 |         <option>View answer</option>
274 |         <option>D</option>
275 |         </select>
276 |    </div>
277 |     <div class="question">
278 |         <p><b>17.</b>What can you use to find information about planned maintenance for Azure services that are critical to your organization?</p>
279 | 
280 |         <ul>
281 |             <li>A. Azure Advisor</li>
282 |             <li>B. Log Analytics</li>
283 |             <li>C. Azure Monitor</li>
284 |             <li>D. Azure Service Health</li>
285 |         </ul>
286 |         <select>
287 |         <option>View answer</option>
288 |         <option>D, another repeat answer</option>
289 |         </select>
290 |    </div>
291 |     <div class="question">
292 |         <p><b>18.</b>Which two components (can be) created in an Azure subscription? Each correct answer presents a complete solution. </p>
293 | 
294 |         <ul>
295 |             <li>A. resources</li>
296 |             <li>B. resource groups</li>
297 |             <li>C. mgmt groups</li>
298 |             <li>D. Azure AD user accounts</li>
299 |         </ul>
300 |         <select>
301 |         <option>View answer</option>
302 |         <option>A, B</option>
303 |         </select>
304 |    </div>
305 |     <div class="question">
306 |         <p><b>19.</b>What is an Azure Storage account named storage001 an example of? </p>
307 | 
308 |         <ul>
309 |             <li>A. a resource</li>
310 |             <li>B. a resource group</li>
311 |             <li>C. a subscription</li>
312 |             <li>D. a resource manager</li>
313 |         </ul>
314 |         <select>
315 |         <option>View answer</option>
316 |         <option>A</option>
317 |         </select>
318 |    </div>
319 |     <div class="question">
320 |         <p><b>20.</b>For which resource does Azure generate separate billing reports and invoices by default? </p>
321 | 
322 |         <ul>
323 |             <li>A. mgmt groups</li>
324 |             <li>B. resource groups</li>
325 |             <li>C. subscriptions</li>
326 |             <li>D. accounts</li>
327 |         </ul>
328 |         <select>
329 |         <option>View answer</option>
330 |         <option>C</option>
331 |         </select>
332 |    </div>
333 |     <div class="question">
334 |         <p><b>21.</b>Which Azure component allows you to replicate resources across a geography to ensure business continuity during a natural disaster at the primary site? </p>
335 | 
336 |         <ul>
337 |             <li>A. region pairs</li>
338 |             <li>B. availability zones</li>
339 |             <li>C. availability sets</li>
340 |             <li>D. Azure VM scale sets</li>
341 |         </ul>
342 |         <select>
343 |         <option>View answer</option>
344 |         <option>A, keywords 'primary site'. Region pairs have a primary and secondary site.</option>
345 |         </select>
346 |    </div>
347 |     <div class="question">
348 |         <p><b>22.</b>Which resource can you use to manage access, policies, and compliance across multiple subscriptions?</p>
349 | 
350 |         <ul>
351 |             <li>A. mgmt groups</li>
352 |             <li>B. resource groups</li>
353 |             <li>C. administrative units</li>
354 |         </ul>
355 |         <select>
356 |         <option>View answer</option>
357 |         <option>A</option>
358 |         </select>
359 |    </div>
360 |     <div class="question">
361 |         <p><b>23.</b>Which Azure resource is a software emulation of a physical computer that includes a virtual processor, memory, storage, and networking resources?</p>
362 | 
363 |         <ul>
364 |             <li>A. a virtual machine</li>
365 |             <li>B. an app service</li>
366 |             <li>C. a function</li>
367 |             <li>D. a container</li>
368 |         </ul>
369 |         <select>
370 |         <option>View answer</option>
371 |         <option>A</option>
372 |         </select>
373 |    </div>
374 |     <div class="question">
375 |         <p><b>24.</b>Which scenario is a use case for a VPN gateway? </p>
376 | 
377 |         <ul>
378 |             <li>A. connecting an on-premises datacenter with an Azure virtual network</li>
379 |             <li>B. partitioning a virtual networks address space</li>
380 |             <li>C. communicating between Azure resources</li>
381 |             <li>D. filtering outbound traffic</li>
382 |         </ul>
383 |         <select>
384 |         <option>View answer</option>
385 |         <option>A</option>
386 |         </select>
387 |    </div>
388 |     <div class="question">
389 |         <p><b>25.</b>What can you use to connect Azure resources, such as Azure SQL databases, to an Azure virtual network? </p>
390 | 
391 |         <ul>
392 |             <li>A. ExpressRoute</li>
393 |             <li>B. network security groups</li>
394 |             <li>C. peering</li>
395 |             <li>D. service endpoints</li>
396 |         </ul>
397 |         <select>
398 |         <option>View answer</option>
399 |         <option>D. Reminder to self that "peering" is a way to connect VNets together.</option>
400 |         </select>
401 |    </div>
402 |     <div class="question">
403 |         <p><b>26.</b>What can you use to provide Mac and Android users with access to a Windows environment that will run Windows-based applications? </p>
404 | 
405 |         <ul>
406 |             <li>A. Azure Logic Apps</li>
407 |             <li>B. Azure Functions</li>
408 |             <li>C. Azure Virtual Desktop</li>
409 |             <li>D. Azure Container instances</li>
410 |         </ul>
411 |         <select>
412 |         <option>View answer</option>
413 |         <option>C</option>
414 |         </select>
415 |    </div>
416 |     <div class="question">
417 |         <p><b>27.</b>Which storage service should you use to store thousands of files containing text and images?</p>
418 | 
419 |         <ul>
420 |             <li>A. Azure Blob Storage</li>
421 |             <li>B. Azure Queue Storage</li>
422 |             <li>C. Azure Disk Storage</li>
423 |             <li>D. Azure Table Storage</li>
424 |         </ul>
425 |         <select>
426 |         <option>View answer</option>
427 |         <option>A</option>
428 |         </select>
429 |    </div>
430 |     <div class="question">
431 |         <p><b>28.</b>Which storage service offers fully managed file shares in the cloud that are accessible by using industry-standard network protocols? </p>
432 | 
433 |         <ul>
434 |             <li>A. Azure Files</li>
435 |             <li>B. Azure Queue Storage</li>
436 |             <li>C. Azure Disk Storage</li>
437 |             <li>D. Azure Table Storage</li>
438 |         </ul>
439 |         <select>
440 |         <option>View answer</option>
441 |         <option>A</option>
442 |         </select>
443 |    </div>
444 |     <div class="question">
445 |         <p><b>29.</b>Which Azure Blob storage service tier has the highest storage costs and the fastest access times for reading and writing data? </p>
446 | 
447 |         <ul>
448 |             <li>A. hot</li>
449 |             <li>B. cool</li>
450 |             <li>C. archive</li>
451 |         </ul>
452 |         <select>
453 |         <option>View answer</option>
454 |         <option>A</option>
455 |         </select>
456 |    </div>
457 |     <div class="question">
458 |         <p><b>30.</b>Which two protocols are used to access Azure file shares? Each correct answer presents a complete solution. </p>
459 | 
460 |         <ul>
461 |             <li>A. FTP</li>
462 |             <li>B. HTTP</li>
463 |             <li>C. NFS</li>
464 |             <li>D. SMB</li>
465 |         </ul>
466 |         <select>
467 |         <option>View answer</option>
468 |         <option>C, D</option>
469 |         </select>
470 |    </div>
471 |     <div class="question">
472 |         <p><b>31.</b>What is the purpose of defense in depth? </p>
473 | 
474 |         <ul>
475 |             <li>A. to enable you to locate and act on resources that are associated with specific workloads, environments, business units, and owners </li>
476 |             <li>B. to manage policies that control or audit resources so that the configurations stay compliant with corporate standards</li>
477 |             <li>C. to protect information and prevent it from being stolen by those who are unauthorized to access it</li>
478 |             <li>D. to evaluate resources and make recommendations to help improve reliability and performance</li>
479 |         </ul>
480 |         <select>
481 |         <option>View answer</option>
482 |         <option>C</option>
483 |         </select>
484 |    </div>
485 |     <div class="question">
486 |         <p><b>32.</b>What enables a user to sign in one time and use that credential to access multiple resources and applications from different providers?</p>
487 | 
488 |         <ul>
489 |             <li>A. SSO</li>
490 |             <li>B. MFA</li>
491 |             <li>C. conditional access</li>
492 |             <li>D. device mgmt</li>
493 |         </ul>
494 |         <select>
495 |         <option>View answer</option>
496 |         <option>A</option>
497 |         </select>
498 |    </div>
499 |     <div class="question">
500 |         <p><b>33.</b>What can you use to ensure that a user can access internal applications from approved laptops only? </p>
501 | 
502 |         <ul>
503 |             <li>A. SSO</li>
504 |             <li>B. MFA</li>
505 |             <li>C. conditional access</li>
506 |             <li>D. hybrid identity </li>
507 |         </ul>
508 |         <select>
509 |         <option>View answer</option>
510 |         <option>C</option>
511 |         </select>
512 |    </div>
513 |     <div class="question">
514 |         <p><b>34.</b>Which two services are provided by Azure AD? Each correct answer presents a complete solution. </p>
515 | 
516 |         <ul>
517 |             <li>A. authentication</li>
518 |             <li>B. data encryption</li>
519 |             <li>C. MFA</li>
520 |             <li>D. SSO</li>
521 |         </ul>
522 |         <select>
523 |         <option>View answer</option>
524 |         <option>A,D. No idea, MFA can also be enabled on Azure AD.</option>
525 |         </select>
526 |    </div>
527 |     <div class="question">
528 |         <p><b>35.</b>You need to compare the costs of running an application in an on-premises datacenter with the costs of running the application in Azure. What should you use to assist you? </p>
529 | 
530 |         <ul>
531 |             <li>A. TCO calculator</li>
532 |             <li>B. Azure Pricing calculator</li>
533 |             <li>C. Azure Cost Management</li>
534 |             <li>D. Azure Advisor</li>
535 |         </ul>
536 |         <select>
537 |         <option>View answer</option>
538 |         <option>A</option>
539 |         </select>
540 |    </div>
541 |     <div class="question">
542 |         <p><b>36.</b>What can you use to ensure that users authenticate by using multi-factor authentication (MFA) when they attempt to sign in from a specific location?</p>
543 | 
544 |         <ul>
545 |             <li>A. Conditional access</li>
546 |             <li>B. Azure role-based access control</li>
547 |             <li>C. SSO</li>
548 |             <li>D. administrative units</li>
549 |         </ul>
550 |         <select>
551 |         <option>View answer</option>
552 |         <option>A</option>
553 |         </select>
554 |    </div>
555 |     <div class="question">
556 |         <p><b>37.</b>What are two basic services provided by all cloud providers? Each correct answer presents a complete solution. </p>
557 | 
558 |         <ul>
559 |             <li>A. app development</li>
560 |             <li>B. colocation</li>
561 |             <li>C. compute</li>
562 |             <li>D. storage</li>
563 |         </ul>
564 |         <select>
565 |         <option>View answer</option>
566 |         <option>C, D</option>
567 |         </select>
568 |    </div>
569 |     <div class="question">
570 |         <p><b>38.</b>What are two characteristics of the public cloud deployment model? Each correct answer presents a complete solution. </p>
571 | 
572 |         <ul>
573 |             <li>A. Services are offered over the internet and are available to anyone who wants to purchase them.</li>
574 |             <li>B. Computing resources are used exclusively by users from one organization.</li>
575 |             <li>C. Servers and storage are owned and operated by a third-party cloud service provider. </li>
576 |             <li>D. Hardware is physically located in an organization's on-site datacenter. </li>
577 |         </ul>
578 |         <select>
579 |         <option>View answer</option>
580 |         <option>A, C</option>
581 |         </select>
582 |    </div>
583 |     <div class="question">
584 |         <p><b>39.</b>What are two characteristics of a consumption-based model? Each correct answer presents a complete solution. </p>
585 | 
586 |         <ul>
587 |             <li>A. no upfront costs</li>
588 |             <li>B. requires the purchase and management of the physical infrastructure</li>
589 |             <li>C. the ability to stop paying for resources that are no longer needed </li>
590 |             <li>D. high capital expenditures</li>
591 |         </ul>
592 |         <select>
593 |         <option>View answer</option>
594 |         <option>A, C</option>
595 |         </select>
596 |    </div>
597 |     <div class="question">
598 |         <p><b>40.</b>Which two characteristics are common advantages of cloud computing? Each correct answer presents a complete solution.</p>
599 | 
600 |         <ul>
601 |             <li>A. high availability</li>
602 |             <li>B. geo-distribution</li>
603 |             <li>C. elimination of horizontal scaling</li>
604 |             <li>D. physical access to servers</li>
605 |         </ul>
606 |         <select>
607 |         <option>View answer</option>
608 |         <option>A, B</option>
609 |         </select>
610 |    </div>
611 |     <div class="question">
612 |         <p><b>41.</b>Why is cloud computing often less expensive than on-premises datacenters? Each correct answer presents a complete solution.</p>
613 | 
614 |         <ul>
615 |             <li>A. you are only billed for what you use. </li>
616 |             <li>B. network bandwith is free</li>
617 |             <li>C. cloud services have limited functionality</li>
618 |             <li>D. services only offered in a single geographic location</li>
619 |         </ul>
620 |         <select>
621 |         <option>View answer</option>
622 |         <option>A</option>
623 |         </select>
624 |    </div>
625 |     <div class="question">
626 |         <p><b>42.</b>[Answer choice] refers to upfront costs incurred one time, such as hardware purchases.</p>
627 | 
628 |         <ul>
629 |             <li>A. Opertional Expenditures</li>
630 |             <li>B. Capital Expenditures</li>
631 |             <li>C. Elasticity</li>
632 |             <li>D. a consumption based model</li>
633 |         </ul>
634 |         <select>
635 |         <option>View answer</option>
636 |         <option>B</option>
637 |         </select>
638 |    </div>
639 |     <div class="question">
640 |         <p><b>43.</b>Which cloud deployment model are you using if you have servers physically located at your organization’s on-site datacenter, and you migrate a few of the servers to the cloud?</p>
641 | 
642 |         <ul>
643 |             <li>A. private cloud</li>
644 |             <li>B. public cloud</li>
645 |             <li>C. hybrid cloud</li>
646 |         </ul>
647 |         <select>
648 |         <option>View answer</option>
649 |         <option>C</option>
650 |         </select>
651 |    </div>
652 |     <div class="question">
653 |         <p><b>44.</b>Deploying and configuring cloud-based resources quickly as business requirements change is called [answer choice].</p>
654 | 
655 |         <ul>
656 |             <li>A. agility</li>
657 |             <li>B. scalability</li>
658 |             <li>C. elasticity</li>
659 |             <li>D. high availability</li>
660 |         </ul>
661 |         <select>
662 |         <option>View answer</option>
663 |         <option>A. keyword 'quickly'.</option>
664 |         </select>
665 |    </div>
666 |     <div class="question">
667 |         <p><b>45.</b>Increasing compute capacity for an app by adding instances of resources such as virtual machines is called [answer choice].</p>
668 | 
669 |         <ul>
670 |             <li>A. vertical scaling</li>
671 |             <li>B. horizontal scaling</li>
672 |             <li>C. disaster recovery</li>
673 |             <li>D. high availability </li>
674 |         </ul>
675 |         <select>
676 |         <option>View answer</option>
677 |         <option>B</option>
678 |         </select>
679 |    </div>
680 |     <div class="question">
681 |         <p><b>46.</b>In cloud computing, [answer choice] allows you to deploy applications to regional datacenters around the world. </p>
682 | 
683 |         <ul>
684 |             <li>A. high availability</li>
685 |             <li>B. disaster recovery</li>
686 |             <li>C. geo-location</li>
687 |             <li>D. elasticity</li>
688 |         </ul>
689 |         <select>
690 |         <option>View answer</option>
691 |         <option>C</option>
692 |         </select>
693 |    </div>
694 |     <div class="question">
695 |         <p><b>47.</b>In a platform as a service (PaaS) model, which two components are the responsibility of the cloud service provider? Each correct answer presents a complete solution.</p>
696 | 
697 |         <ul>
698 |             <li>A. operating system</li>
699 |             <li>B. physical network</li>
700 |             <li>C. user access</li>
701 |             <li>D. info and data</li>
702 |         </ul>
703 |         <select>
704 |         <option>View answer</option>
705 |         <option>A, B</option>
706 |         </select>
707 |    </div>
708 |     <div class="question">
709 |         <p><b>48.</b>our organization is building a custom application. You need to focus on application development rather than configuration and management of servers. Which cloud service model should you use? </p>
710 | 
711 |         <ul>
712 |             <li>A. IaaS</li>
713 |             <li>B. PaaS</li>
714 |             <li>C. Saas</li>
715 |         </ul>
716 |         <select>
717 |         <option>View answer</option>
718 |         <option>B</option>
719 |         </select>
720 |    </div>
721 |     <div class="question">
722 |         <p><b>49.</b>What uses the infrastructure as a service (IaaS) cloud service model?</p>
723 | 
724 |         <ul>
725 |             <li>A. Azure virtual machines</li>
726 |             <li>B. Azure App services</li>
727 |             <li>C. Microsoft Office 365</li>
728 |             <li>D. Azure Cosmos DB</li>
729 |         </ul>
730 |         <select>
731 |         <option>View answer</option>
732 |         <option>A</option>
733 |         </select>
734 |    </div>
735 |     <div class="question">
736 |         <p><b>50.</b>Which type of cloud service are virtual networks?</p>
737 | 
738 |         <ul>
739 |             <li>A. IaaS</li>
740 |             <li>B. PaaS</li>
741 |             <li>C. SaaS</li>
742 |         </ul>
743 |         <select>
744 |         <option>View answer</option>
745 |         <option>A</option>
746 |         </select>
747 |    </div>
748 | </body>
749 | </html>


--------------------------------------------------------------------------------