Which of the following terms refers to making a service available with no downtime for an extended period?

Navigation

• 🧭 Episode List
• 💬 Episode Summary
• 📚 Study cheat sheet
• 🧠 Practice Test

• Skills Learned
  • Describe what is Cloud Computing
  • Describe terms such as High Availability, Scalability, Elasticity, Agility, Fault Tolerance, and Disaster Recovery
• Study Guide
  • Microsoft Learn: Explore key cloud concepts
  • Azure Homepage: Cloud computing terms
  • 🌐 Wikipedia: Cloud Computing Characteristics

Question 2

Match words from the boxes with the numbers in the picture below.

❌ ✔ ⚪ 🔵 ⬜ 🟦

1. Vertical, 2. Up, 3. Down, 4. In, 5. Out, 6. Horizontal

❌ ✔ ⚪ 🔵 ⬜ 🟦

1. Up, 2. Horizontal, 3. Down, 4. In, 5. Out, 6. Vertical

❌ ✔ ⚪ 🔵 ⬜ 🟦

1. Horizontal, 2. Up, 3. Down, 4. In, 5. Out, 6. Vertical

❌ ✔ ⚪ 🔵 ⬜ 🟦

1. Out, 2. Up, 3. Down, 4. Horizontal, 5. Vertical, 6. In

❌ ✔ ⚪ 🔵 ⬜ 🟦

1. Vertical, 2. In, 3. Down, 4. Up, 5. Out, 6. Horizontal

✔ That's correct

❌ That's not correct

👨‍🦱 💬 Increasing the size of the resource is called scaling up, hence decreasing the size is scaling down. Because we move along the vertical line, changing the size is called vertical scaling. Increasing the amount of instances of our resource is called scaling out, hence decreasing the amount is scaling in. Because we move along the horizontal line, changing the size is called horizontal scaling.

The latest Microsoft AZ-900 Azure Fundamentals certification actual real practice exam question and answer (Q&A) dumps are available free, which are helpful for you to pass the Microsoft AZ-900 Azure Fundamentals exam and earn Microsoft AZ-900 Azure Fundamentals certification.

Question 491

Exam Question

Your company has noticed that storage costs have decreased significantly over the past few years due to cloud providers’ ability to purchase larger amounts of storage at significant discounts. These savings have allowed your company to purchase additional cloud resources.

Which cloud feature is represented in this scenario?

A. Agility
B. High availability
C. Disaster recovery
D. Fault tolerance
E. Scalability
F. Elasticity
G. Economy of scale

Correct Answer

G. Economy of scale

Explanation

You would choose economy of scale. The concept of economy of scale is the ability to do business cheaper and more efficiently when operating on a larger scale, in comparison to operating on a smaller scale.

You would not choose agility. Agility is the ability to react quickly. Cloud services can allocate and deallocate resources quickly. These are on-demand services that are provisioned in minutes. There is no manual intervention in provisioning or deprovisioning services.

You would not choose elasticity. This feature increases or decreases resources as needed, but unlike scalability, elasticity is done automatically. Elastic resources are based on the current needs and resources are added or removed dynamically to meet those needs, from the most advantageous geographic location. A distinction between scalability and elasticity is that elasticity is done automatically.

You would not choose high availability. This feature allows services to run for extended periods, with very little downtime, depending on the service.

You would not choose scalability. This feature can increase (scale-up) or decrease (scale-down) resources that are assigned to a workload. As demand increases, you can add additional resources or capabilities to manage the increase in demand (known as scaling up). Scalability does not have to be done automatically.

You would not choose fault tolerance. Fault tolerance is the ability to remain up and running in the event of a component or service that is no longer functioning. Typically, redundancy is built into cloud services architecture so that if one component fails, a backup component takes its place. This type of service is said to be tolerant of faults.

You would not choose disaster recovery. This feature allows you to recover from a cloud service outage caused by an event. Cloud services disaster recovery can happen very quickly with automation, with resources being readily available for use.

Objective: Describe cloud concepts

Sub-Objective: Describe the benefits of using cloud services

Reference

Wiki > Economy of Scale

Techopedia > Cloud Elasticity

Sysfore Blog > Agility on Cloud – A Vital Part of Cloud Computing

TutorialsPoint > Microsoft Azure – Scalability

Wiki > High Availability

IBM Knowledge Center > High availability versus fault tolerance

Question 492

Exam Question

Which cloud service model is a collaborative effort in which infrastructure is shared between several organizations with common concerns?

A. Community cloud
B. Hybrid cloud
C. Public cloud
D. Private cloud

Correct Answer

A. Community cloud

Explanation

A community cloud is a cloud model that is a collaborative effort between multiple organizations that is managed and secured commonly by the organizations participating in that community. Typically, a community cloud is used with organizations that are working on joint projects or applications that require a cloud to manage and execute the projects or applications regardless of the solution rented.

All other choices are incorrect.

A public cloud is owned, managed, and supported by the vendor alone. Examples of a public cloud are Amazon Web Services, Microsoft 365, and Microsoft Azure. A public cloud provides the following advantages:

• Hardware and software are provided by the cloud provider so there is no need to purchase either.
• The customer only pays for the services that they consume.
• Scalability is almost unlimited because on-demand resources are available when you need it.
• The reliability of the cloud is guaranteed and provides cost-effective reliability.

A private cloud has computing resources exclusively owned, managed, and used by a single organization. A private cloud has the following advantages:

• A private cloud is more secure than a public cloud because cloud resources are not shared with others.
• Private clouds provide scalability and efficiency.

A hybrid cloud combines the best of a public cloud and a private cloud so you can take advantage of both. A hybrid cloud has the following advantages:

• You can take advantage of cloud bursting. With cloud bursting, if there is a spike in demand for an application or resource, the organization goes to the public cloud to use additional computing resources.
• You can use a hybrid cloud to ease transitioning to the cloud by phasing in workloads over stages.

Objective: Describe cloud concepts

Sub-Objective: Describe cloud computing

Reference

What is a Community Cloud? – Definition from Techopedia

Question 493

Exam Question

A company is using containers for deploying all of its web applications. During a security audit, you notice that Microsoft Defender for Cloud is not being used properly to provide misconfigurations related to containers.

For which resource can you NOT use Microsoft Defender for Cloud to secure the containers?

A. Azure Kubernetes Service (AKS)
B. Container hosts (VMs running Docker)
C. Azure Container Registry (ACR)
D. Azure Container Instance (ACI)

Correct Answer

D. Azure Container Instance (ACI)

Explanation

Azure Container Instance (ACI) does not use Microsoft Defender for Cloud. ACI is a service that allows you to run containers in the cloud without using VMs.

Defender for Cloud can protect Kubernetes clusters, container hosts that are VMs running Docker, and Azure Container Registries (ACRs)

The following shows the resources protected by Microsoft Defender.

You should not choose Azure Kubernetes Service (AKS). Microsoft Defender for Cloud can be used for assessments, finding misconfigurations, and for guidelines to improve security with AKS.

Microsoft Defender for Cloud can show misconfigurations in your Docker environment as well as providing guidelines for mitigating threats indicated by Azure Defender. This is provided by Microsoft Defender for servers, which compares the configurations with the Center for Internet Security Docker Benchmark.

Microsoft Defender for Cloud provides vulnerability assessments along with management tools for Azure Container Registry (ACR) registry entries.

Objective: Describe Azure architecture and services

Sub-Objective: Describe Azure identity, access, and security

Reference

Microsoft Docs > Azure > Security > Microsoft Defender for Cloud > Overview of Microsoft Defender for Containers

Question 494

Exam Question

The Nutex Corporation wants to make several configuration updates to apps and services. You are part of the Azure Network Management team who must make these updates. You prefer making updates from the command line.

Which of the following statements about the Azure CLI are TRUE? (Choose four.)

A. JSON is the default output format of the Azure CLI.
B. Service principals are used to securely log in to the Azure CLI.
C. Azure CLI can be set to scope the commands to a specific command group, in both interactive and non-interactive mode.
D. CLI configuration files are saved in INI format.
E. Azure Classic CLI is no longer updated or maintained.

Correct Answer

A. JSON is the default output format of the Azure CLI.
B. Service principals are used to securely log in to the Azure CLI.
D. CLI configuration files are saved in INI format.
E. Azure Classic CLI is no longer updated or maintained.

Explanation

The following statements are true:

• Azure Classic CLI is no longer updated or maintained.
• CLI configuration files are saved in INI format.
• JSON is the default output format of the Azure CLI.
• Service principals are used to securely log in to the Azure CLI.

Older Azure CLI versions (1.x and lower) are now referred to as Azure Classic CLI. Microsoft recommends moving any classic deployments with the Azure Resource Manager model and migrating these deployments to the latest available version of the Azure CLI.

The INI file format is defined by section headers and uses the following to save data:

• Section headers – written as [section-name]. Section names are case-sensitive.
• Entries – key-value pairs and key names are not case-sensitive.
• Comments are any line that begins with a # or. Inline comments are not allowed.

The Azure CLI uses JSON as its default output format but offers other formats. Use the –output (–out or –o) parameter to format CLI output. The argument values and types of output are json, jsonc, yaml, table, and tsv.

Service principals are accounts that are not tied to a specific user. These accounts use permissions assigned from pre-defined roles. Authenticating with a service principal is the best way to write secure scripts or programs.

With Service principals, none of the sign-in information is stored by the CLI. Instead, an authentication refresh token is generated by Azure and stored.

It is not true that the Azure CLI can be set to scope the commands to a specific command group, in both interactive and non-interactive mode. Scoping is only available in interactive mode.

For example, when you use az>> %%vm instead of az>> vm to set the scope of the commands to the vm, %% sets the scope. When Azure CLI is scoped, all commands are interpreted in that scope. It is very efficient when a lot of commands are executed in a specific command group.

Objective: Describe Azure management and governance

Sub-Objective: Describe features and tools for managing and deploying Azure resources

Reference

Microsoft Azure > Azure CLI > Differences between Azure CLI products

Microsoft Azure > Azure CLI > Azure CLI configuration

Microsoft Azure > Azure CLI > Output formats for Azure CLI commands

Microsoft Azure > Azure CLI > Sign in with Azure CLI

Microsoft Azure > Azure CLI > Azure CLI interactive mode

Question 495

Exam Question

You need to coordinate services with your cloud provider. You need to create a proposal for a budget for cloud services. You must indicate which responsibilities belong to the cloud provider and which belong to your organization. Which of the following responsibilities are shared by the customer, not the cloud provider?

Move the appropriate responsibility to appropriate category.

Customer Responsibility:

• Physical security
• Host infrastructure
• Application level controls
• Client and end-point protection
• Data classification & accountability

Correct Answer

SaaS:

• Client and end-point protection
• Data classification & accountability

PaaS:

• Application level controls
• Client and end-point protection
• Data classification & accountability

IaaS:

• Host infrastructure
• Application level controls
• Client and end-point protection
• Data classification & accountability

On-premise:

• Physical security
• Host infrastructure
• Application level controls
• Client and end-point protection
• Data classification & accountability

Explanation

You should choose the following:

The accountability and classification of data is the responsibility of IaaS, PaaS, SaaS, and on-premises. The service provider is responsible for the data and when it is available. A service provider has a service level agreement (SLA) that guarantees when the data is available. A service provider is not responsible for determining which data of yours is important. A customer’s company may classify its own data and is responsible for determining which data is important.

End-point protection is the responsibility of IaaS, PaaS, SaaS, and on-premises organizations. All connections from clients to on-premises servers or cloud-based servers must be secured.

Application-level controls for the customer are solely responsible for on-premises and IaaS and partially shared between the PaaS shared provider. Application-level controls are not the responsibility of the customer for SaaS. Application-level controls are the sole responsibility of the service provider since the vendor provides the software in a SaaS cloud and thus provides the controls.

Host infrastructure is the responsibility of both the customer and service provider in an IaaS. The IaaS service provider provides the VMs, routers, gateways, and other infrastructure, but the customer decides which resources to allocate. Host infrastructure is the sole responsibility of the provider with a PaaS and SaaS. The customer does not have control over the infrastructure with a PaaS or SaaS.

Objective: Describe cloud concepts

Sub-Objective: Describe cloud service types

Reference

Microsoft Docs > Azure > Security > Fundamentals > Shared responsibility in the cloud

Shared Responsibility for Cloud Computing-2019-10-25.pdf (microsoft.com)

Question 496

Exam Question

You are considering moving several of your network services to the cloud. You are evaluating a private, public, and hybrid cloud.

Match the advantage to the proper cloud implementation.

Advantages:

• No need to purchase hardware or software
• Service provider provides the maintenance
• Scalability
• Pay only for the service you use.
• Highest level of control and security
• Pay for extra computing power only when needed
• Helpful for migrating services to the cloud

Correct Answer

Public Cloud:

• No need to purchase hardware or software
• Service provider provides the maintenance
• Scalability
• Pay only for the service you use.

Private Cloud:

• Scalability
• Highest level of control and security

Hybrid Cloud:

• Scalability
• Pay for extra computing power only when needed
• Helpful for migrating services to the cloud

Explanation

You should choose the following:

A public cloud, such as Amazon Web Services or Microsoft Azure, provides the following advantages:

• Hardware and software are provided by the cloud provider, so there is no need to purchase either.
• The customer only pays for the services that they consume.
• Scalability is almost unlimited because on-demand resources are available when you need it.
• The reliability of the cloud is guaranteed and provides cost-effective reliability.

A private cloud has computing resources exclusively used by a single organization. A private cloud has the following advantages:

• A private cloud is more secure than a public cloud because cloud resources are not shared with others.
• Private clouds provide scalability and efficiency.
• Scalability is available in a private cloud and is as efficient as a public cloud.

A hybrid cloud combines the best of a public cloud and a private cloud so you can take advantage of both. A hybrid cloud has the following advantages:

• You can take advantage of cloud bursting. With cloud bursting, if there is a spike in demand for an application or resource, the organization goes to the public cloud to use additional computing resources.
• You can use a hybrid cloud to ease transitioning to the cloud by phasing in workloads over stages.
• A hybrid cloud has the ability to scale to the public cloud.

Objective: Describe cloud concepts

Sub-Objective: Describe cloud computing

Reference

Microsoft Azure > What are public, private, and hybrid clouds?

Question 497

Exam Question

The Nutex Corporation plans to comply with all the privacy, compliance, and data protection standards. You are asked to investigate the security, compliance, and privacy offerings and commitments from Microsoft.

Which of the following statements about the Azure Service Trust Portal are TRUE? (Choose three.)

A. The Azure Service Trust Portal provides Security and Compliance Blueprints to assist customers with building applications that comply with compliance regulations and standards.
B. All transactions to Azure Storage through the Azure portal occur via HTTPS.
C. If a customer’s cloud subscription expires, Microsoft will delete the data in the subscription in 90 days without any notice.
D. If an Azure tenant is deactivated, Microsoft permanently deletes all data for that tenant in the Service Trust Portal within 24 hours of tenant deactivation.
E. Microsoft’s privacy principle states that Microsoft will not use your email, chat, files, or other personal content to target ads to you.

Correct Answer

A. The Azure Service Trust Portal provides Security and Compliance Blueprints to assist customers with building applications that comply with compliance regulations and standards.
D. If an Azure tenant is deactivated, Microsoft permanently deletes all data for that tenant in the Service Trust Portal within 24 hours of tenant deactivation.
E. Microsoft’s privacy principle states that Microsoft will not use your email, chat, files, or other personal content to target ads to you.

Explanation

Microsoft’s privacy principle states that Microsoft will not use your email, chat, files, or other personal content to target ads to you. Microsoft’s privacy principle also states that:

• You are in control of your privacy with easy-to-use tools and clear choices.
• Microsoft will be transparent about data collection and use so that you can make informed decisions.
• Microsoft protects your data with strong security and encryption.
• Microsoft will respect your local privacy laws and fight for legal protection of your privacy as a right.
• When Microsoft collects data, Microsoft will use it to benefit you and to make your experiences better.

If an Azure tenant is deactivated, Microsoft permanently deletes all data for that tenant in the Service Trust Portal (e.g., user information and data uploaded to Compliance Manager) within 24 hours of tenant deactivation.

The Azure Service Trust Portal provides Security and Compliance Blueprints to assist customers with building applications that comply with compliance regulations and standards.

Azure Security and Compliance Blueprints include industry-specific overviews and guidance, customer responsibilities matrix, reference architectures with threat models, control implementation matrices, and automation to deploy reference architectures.

If a customer’s cloud subscription expires, Microsoft will not delete the data in the subscription in 90 days without notice. If you terminate a cloud subscription or it expires (except for free trials), Microsoft will store your customer data in a limited-function account for 90 days (the “retention period”) to give you time to extract the data or renew your subscription. During this period, Microsoft provides multiple notices so you will be amply forewarned of the upcoming deletion of data.

Objective: Describe Azure management and governance

Sub-Objective: Describe features and tools in Azure for governance and compliance

Reference

Microsoft > Trust Center > Privacy at Microsoft

Microsoft > Trust Center > Data management at Microsoft

Microsoft > Service Trust Portal > Frequently Asked Questions

Question 498

Exam Question

The web team of the Nutex Corporation is developing a new enterprise solution. They are using the newest technologies, and the functionality is divided into many independent parts that can be maintained, scaled, or updated independently. They need to create a serverless solution that will save on costs and allow you to write less code.

What should you recommend?

A. Azure Functions
B. Azure Container Instances (ACI)
C. Azure Kubernetes Service (AKS)
D. Azure Virtual Machine (VM)

Correct Answer

A. Azure Functions

Explanation

You should choose Azure Functions because they are used for serverless processing. This serverless solution saves on costs and allows you to write less code as well as maintaining less infrastructure.

You should not choose Azure Container Instances (ACI). ACI offers a fast and simple way to create and develop apps in a container without worrying about have VMs provisioned. It takes less than 30 seconds to start a container with ACI in the best scenarios, faster than deploying an app with App Services. Although ACI allows you to use containers which eliminate the need to provision and manage VMs, ACI will not allow you to write less code.

Azure Kubernetes Service (AKS) is not a serverless solution that allows you to write less code. It is an orchestration service that requires a YAML file for configuration. It is more complex and for more enterprise solutions. Also, Azure Kubernetes Service (AKS) for burstable scaling uses scaling on ACI because it is faster to scale compared with AKS nodes.

Using an Azure VM would not be a serverless solution.

Objective: Describe Azure architecture and services

Sub-Objective: Describe Azure compute and networking services

Reference

Azure > Product Documentation > Functions > Overview > About Azure Functions > Introduction to Azure Functions

Azure > Overview > Serverless computing

Azure > Services > Azure Functions

Question 499

Exam Question

Your company plans on using Azure Virtual Desktop to create a multi-session Windows 10 deployment. You have remote clients that need to have virtualized Microsoft 365 Apps running. You need to have existing Remote Desktop Services (RDS) and Windows Server desktops and apps to the client computers.

Which of the following is true regarding Azure Virtual Desktop? (Choose two.)

A. Remote clients cannot run the Remote Desktop Connection (MSTSC) client.
B. Remote clients cannot run the Android operating system.
C. Remote clients cannot run the RemoteApp and Desktop Connections (RADC) client.
D. You cannot prevent sensitive information from being screen captured by software running on a remote client.
E. Remote clients cannot run the iOS operating system.

Correct Answer

A. Remote clients cannot run the Remote Desktop Connection (MSTSC) client.
C. Remote clients cannot run the RemoteApp and Desktop Connections (RADC) client.

Explanation

Clients that use Azure Virtual Desktop can support the following client operating systems:

• Windows
• iOS
• macOS
• Android
• Web

However, Azure Virtual Desktop does not support clients that run the Remote Desktop Connection (MSTSC) client. or the RemoteApp and Desktop Connections (RADC) client.

You can stop a screen from being captured by software running at a client endpoint using the screen capture protection in Azure Virtual Desktop. Screen capture protection protects client VMs from spyware or other malware from taking screenshots and sending them to the malware owner.

Objective: Describe Azure architecture and services

Sub-Objective: Describe Azure compute and networking services

Reference

Microsoft Docs > Azure > What is Azure Virtual Desktop?

Microsoft Docs > Azure > What’s new in Azure Virtual Desktop?

Announcing general availability of Screen Capture Protection for Azure Virtual Desktop – Microsoft Tech Community

Question 500

Exam Question

The Nutex Corporation has a partnership with the Verigon Corporation. Both Nutex and Verigon have multi-factor authentication (MFA) capabilities. Wendy, a user at Verigon, needs access to an application in Nutex named the AT application.

Which of the following should you configure to ensure that Wendy can access the AT application? (Choose three.)

A. Configure MFA access for the AT application in Verigon.
B. Create a policy named MFA policy on the AT application under Conditional Access. Under Conditions, choose Require multi-factor authentication under Allow access.
C. Ensure that Nutex has sufficient Premium Azure AD licenses that support MFA.
D. Configure MFA access for the AT application in Nutex.
E. Ensure that Verigon has sufficient Premium Azure AD licenses that support MFA.
F. Create a policy named MFA policy on the AT application under Conditional Access. Under Controls, choose Require multi-factor authentication under Allow access.

Correct Answer

C. Ensure that Nutex has sufficient Premium Azure AD licenses that support MFA.
D. Configure MFA access for the AT application in Nutex.
F. Create a policy named MFA policy on the AT application under Conditional Access. Under Controls, choose Require multi-factor authentication under Allow access.

Explanation

You would do the following:

• Configure MFA access for the AT application in Nutex.
• Create a policy named MFA policy on the AT application under Conditional Access. Under Controls, choose Require multi-factor authentication under Allow access.
• Ensure that Nutex has sufficient Premium Azure AD licenses that support MFA.

To configure MFA on an application, you must find the application in Azure in the tenant that contains it. In this scenario, Nutex owns the AT application. You would choose Conditional Access under the application and click Add to create a policy. Once the policy is created, you can create assignments to grant users and groups access to the application. You can select the All Guest Users to allow access to external users or find a specific user. You can choose to specify conditions on device platforms, client apps, or locations. If you choose locations, you can allow users from any location or only allow users from trusted IPs. The Controls section of the policy allows you to block or allow access. If you choose to allow access, you can require multi-factor authentication.

Even though Nutex and Verigon have MFA capabilities, MFA policies are enforced at the resource organization, which is Nutex because it owns the AT application. When Wendy from Verigon attempts to access the AT application in the Nutex tenant, she will be asked to complete an MFA challenge. Wendy can set up her MFA with Nutex and choose their MFA option.

As Nutex owns the application, they must have sufficient Premium Azure AD licenses that support MFA, not Verigon. Wendy, the user from Verigon, consumes one of these licenses from Nutex.

Objective: Describe Azure architecture and services

Sub-Objective: Describe Azure identity, access, and security

Reference

Microsoft Docs > Azure > Active Directory > Conditional access for B2B collaboration users

Microsoft Docs > Azure > Active Directory > Privileged Identity Management > Multi-factor authentication and Privileged Identity Management