AZ 900 Practice Test 2

An organization is approaching maximum limit of vCPU in one Azure Subscription. As an Azure Cloud Administrator which of the below action should be performed?

Contact Azure Cloud Support to increase the quota within the same subscription

When an organization faces a subscription limit on resources like vCPU in Azure, contacting Azure support is the recommended action to request an increase in the subscription limit. Azure has predefined limits for resources to ensure fair usage and optimal performance. These limits can often be increased upon request, depending on specific needs and justification provided by the organization. Deleting the subscription or creating additional subscriptions can lead to management complexity and does not directly address the issue. Managing costs, while important, does not directly increase resource limits.

Azure for Students

A special subscription that provides free Azure credits and access to many services free for 12 months

a special subscription allowing users to explore Azure’s services. There are free credits and access to many services free for 12 months.

Free Trial

Free access to Azure resources for a limited time

free access to Azure resources for a limited time. As with almost all online services, a person cannot create a new free trial if a previous one has expired, and only one free trial subscription can be available for an email address or an account.

Pay-as-you-go

No upfront cost. Cancel subscription at anytime

A user has to pay only for the resources used. There are no up-front costs or any hidden charges. It can be canceled anytime without prior notice.

An administrator has been tasked with creating management groups to organize the subscriptions for the resources in the Azure cloud. The administrator created a management group named “Training Dept.” He assigned the “Sales Dept” as the parent of the “Training Dept” group. When he tried assigning the “IT Dept” as another parent of the “Training Dept,” Azure refused the action and threw an error. What is causing this issue?

Azure does not allow multiple parents for a single management group or subscription.

There are a few limitations for management groups in Azure. The limitations include having a single parent for a single management group or subscription and only supporting six levels in the group hierarchy. Moreover, there is a limit to the number of management groups that can be created.

An administrator is unable to create Azure resources inside a subscription that resides in a management group. What is the cause of this problem?

Management group settings do not allow the resources to be specified for a subscription.

Management groups in Azure can be used to apply policies and governance across multiple subscriptions. If the management group has policies or restrictions that prevent the creation of certain resources, the administrator will be unable to create those resources within the affected subscriptions.

True or false: A container is an image (a zipped version of an application) that includes only the programming for an application.

False

A container is like a package containing everything necessary for an application to work. It is created by compressing an application into a file called an image. This image contains everything the application needs to run, such as the parts of the operating system that the user interacts with. It may also have other components like a database engine or a web server.
 
The great thing about containers is that they can be used in different environments. A container image can be deployed in a favorable environment. Once it is in the right environment, the image is opened and a container is started. This container is where the application actually runs and does its thing.

An administrator tests a Docker image in a VM. When she deploys the container on a Linux virtual machine, it fails to run, throwing an incompatibility error. What is the reason for this error?

The Docker image had Windows OS as its primary operating system.

A container’s user-mode components are part of the image. The VM must have a compatible operating system for the container. A Docker image built for Linux will not run on a Windows host, nor will an image built for Windows run on a Linux host.

Which two services make it easy to find the image of the containerized application using a Docker tag or image URL? (Choose two.)

Azure Container Instances, Azure Kubernetes Service

An easier option is to use Azure Container Instances (ACI) or Azure Kubernetes Service (AKS). ACI is the easiest option because it can be configured with minimal requirements. It requires an image that can be a Docker tag or an image URL, a basic VM configuration for the container, and a name for the container. Azure takes care of the rest by creating server resources to run the container.

What are the mandatory options to choose when creating a container instance in Azure Container Instances (ACI)? (Choose three.)

Container Name, Image source, Instance size

When creating a container instance in Azure Container Instances (ACI), the following should be specified:

• Container Name: A unique name for the container instance within the resource group.

• Image source: Specifies the location of the container image, which can be from Azure Container Registry, Docker Hub, or any other container registry.

• Instance size: Specifies the number of CPU cores and amount of memory allocated to the container instance. This defines the resources allocated to your container.

The other options (Container Description, VM size for the container, Network name) are not required fields when creating a container instance in ACI.

Container Name

A unique name for the container instance within the resource group

Image source

Specifies the location of the container image, which can be from Azure Container Registry, Docker Hub, or any other container registry.

Instance size

Specifies the number of CPU cores and amount of memory allocated to the container instance. This defines the resources allocated to your container

How can an administrator change the DNS name label and the image of an instance created with Azure Container Instance (ACI)?

Delete the instance and re-create it

There is no way to change the DNS name label or the image for an instance. The administrator has to delete the instance and re-create it with the desired DNS name label and image. A downside of deleting and re-creating an instance is that the administrator might lose the public IP address assigned to that instance.

An Azure administrator wants a service that runs Azure App Service, supports a microservices architecture, and uses a spare VM in App Service to save execution time costs. Which service is suitable for this requirement?

Azure Functions

Azure Functions use Azure App Services and run on a microservice architecture. It can use a spare VM in the App Service to run microservices which can save costs. The user only has to pay for the execution time of the function.

How do virtual machine scale sets distribute incoming traffic across multiple VMs in a complex environment?

Basic Layer-4 traffic distribution

VM scale sets in environments like Azure use a load balancer that operates at Layer 4 (the transport layer) of the OSI model. This means traffic distribution is based on TCP or UDP protocols using IP address and port information. It does not inspect the application content (Layer 7), nor does it operate at the data link level (Layer 2), which handles MAC addresses and switching. This approach ensures efficient, low-latency traffic distribution across multiple virtual machines.

Azure App service uses which of the following DevOps capabilities to help an application perform smarter and faster? (Choose three.)

Continuous deployment from Azure DevOps, GitHub, and Docker Hub, Azure container registry integration and deployment, Integration with Docker Hub and Other Repository

Azure App services are an excellent way to host and manage web applications. It has great DevOps features that can help an application perform package management like Azure container registry integration and deployment, use staging environments, custom domains, SSL certificates, and CLI to control the applications.

An administrator needs a VM for a relational database that is part of an application running in-memory analytics. She wants the application and the database to run without bottlenecks or resource contention. Which VM type is better suited for this scenario?

Memory-Optimized (E, G, M family series)

The Memory-Optimized VMs offer a high memory-to-CPU ratio. They are well-suited for in-memory analytics, relational databases, or any workload that needs smooth operation without bottlenecks or other memory problems. This VM supports workloads that are memory over CPU.

Which pricing tier of the App Service plan is suitable for production applications requiring 99.95 SLA, 50 GB of storage, and CPUs supporting 32-bit and 64-bit applications?

Standard

The standard tier offers a 99.95 uptime service level agreement and 50 GB of storage, and it supports unlimited apps with 32- and 64-bit architecture. It also has 10 auto instances that can help apps load faster and perform better. There are six pricing tiers for the Azure App service plan. Each tier offers an optimized service for specific workloads.

Where can an administrator get secure images to create a new container using the Kubernetes service?

Azure Container Registry

As a valuable service, Azure Container Registry, or ACR, diligently maintains a record of present, legitimate container images. This proficient system effectively handles storing and managing files and artifacts designed explicitly for containers. Whenever your Azure container instances and Kubernetes service require the creation of a new container, ACR serves as the ultimate source for fetching the necessary images. Moreover, to guarantee the safety of container images, Azure identity, and security functionalities can be employed with utmost confidence.

Which cloud-native SIEM solution provides an overview of all Azure, on-premises, and other cloud services through a single pane of glass operation?

Azure Sentinel

Azure Monitor is a tool that offers services to gain insights into a VM’s performance and operational health. Azure Advisor offers advice on optimizing Azure resources. In contrast, Azure Sentinel is a cloud-native security incident and event management solution that shows insights into all Azure, on-premises, and other cloud resources through a single pane of glass service.

To perform automatic scaling of complex and sensitive applications, Azure Kubernetes Service offers which of the following auto cluster scaling options? (Choose two.)

Cluster Autoscaler, Horizontal Pod Autoscaler

Sometimes, scaling the complex and sensitive containerized application becomes difficult to configure. Therefore, an automatic configuration approach is required to be used in such cases. Azure Kubernetes Service (AKS) offers two auto cluster scaling options.

• Horizontal Pod Autoscaler

• Cluster Autoscaler

When the demand is high, the cluster autoscaler scales out the VMs automatically or adds a scheduled node to the system. What happens when the demand goes down?

The scaling method automatically scales back the scheduled nodes to their original number.

The Cluster Autoscaler is responsible for resizing cluster nodes according to workload demands. It automatically scales out or adds scheduled nodes to the system in high-demand situations. Conversely, when demand decreases, the scaling method automatically scales back the scheduled nodes to their original quantity. This scaling feature enhances the availability of your workload whenever required.

Which storage volume support types are supported by Azure Kubernetes Services (AKS) when a running application is stateful and functions are stateless? (Choose two.)

Static storage volumes, Dynamic storage volumes

AKS provides persistent storage services through storage volume support. It supports static and dynamic storage volumes for a stateful running application with stateless functions. Based on the demands of the workload, all the available pods can be attached or reattached to the created storage volumes on different nodes.

How does Azure Virtual Desktop help users save money by configuring VMs for depth mode load balancing?

It allocates all users to one VM before going on to the next host pool

In Azure Virtual Desktop performance management, administrators load balance users on VM host pools through the breadth and depth modes load balancing. Host pools consist of collections of virtual machines (VMs) that possess identical configurations and are utilized by various users. Optimal performance can be achieved through load balancing during user sign-ins (breadth mode). In breadth mode, users are assigned sequentially within the host pool to handle their workloads. To reduce costs, VMs can be configured for load balancing in depth mode, where users are allocated to a single VM before moving on to the next one. Azure Virtual Desktop offers automatic provisioning of additional VMs when the incoming demand exceeds a specific threshold, catering to increased workload requirements.