Scenario Based MCQ Questions and Answers

Mastering Scenario Based is crucial for cloud certification success. This dedicated practice set features 436 Scenario Based MCQ questions and answers designed to mirror real exam scenarios across various AZURE certifications.

📝 436 Questions⏱️ 90 min🎯 Pass: 70%

About Scenario Based Practice Questions

This detailed quiz focuses on Scenario Based, covering key concepts and scenarios often found in AZURE exams.

  • Comprehensive coverage of Scenario Based features.
  • Scenario-based questions testing design and troubleshooting skills.
  • Detailed explanations to reinforce learning.

All 436 Scenario Based Questions

Browse through the complete list of questions and answers below. Use this resource to review specific concepts or check your understanding of Scenario Based.

1

Scenario: A company wants to host a public website on Azure. They need a service that provides global scale, SSL offloading, and WAF protection. Which service is the BEST fit?

Azure Front Door
Azure Application Gateway
Azure Load Balancer
Azure Traffic Manager
View Explanation
✓ Correct Answer: Azure Front DoorExplanation:Front Door is specifically designed for global, secure HTTP delivery. Application Gateway is better for regional use.
2

Scenario: An administrator needs to migrate a legacy on-premises application to Azure that requires a shared folder accessed by SMB. Which service should they use?

Azure Files
Azure Blob Storage
Azure Managed Disks
Azure SQL Database
View Explanation
✓ Correct Answer: Azure FilesExplanation:Azure Files provides fully managed file shares accessible via SMB and NFS.
3

Scenario: A team is deploying a multi-tier application. They want to ensure the database tier is NEVER directly accessible from the internet. How should this be configured?

Place the database in a private subnet and do NOT assign any public IP addresses to the instances
Use a complex password for the database
Disable the Windows firewall on the DB servers
Use a separate Azure subscription for the database
View Explanation
✓ Correct Answer: Place the database in a private subnet and do NOT assign any public IP addresses to the instancesExplanation:Network isolation is the most fundamental security control.
4

Scenario: An organization wants to allow their developers to self-provision environments but needs to ensure they only use a specific set of VM sizes to keep costs under control. Which feature should be used?

Azure Policy (Allowed VM Size SKU)
RBAC role assignments
Resource Group Quotas
Cost Management Alerts
View Explanation
✓ Correct Answer: Azure Policy (Allowed VM Size SKU)Explanation:Azure Policy enables governance by enforcing restrictions on resource properties.
5

Scenario: A university needs to host a website that handles seasonal registration spikes. They need a solution that can automatically scale up and down based on the number of concurrent sessions. Which service is BEST?

Azure App Service (with Autoscale)
A single, large Azure VM
Azure Batch
Azure Container Instances
View Explanation
✓ Correct Answer: Azure App Service (with Autoscale)Explanation:App Service is a PaaS offering that simplifies scaling for web applications.
6

Scenario: An administrator wants to receive a mobile push notification whenever anyone deletes a resource in a production subscription. Which combination should be used?

Azure Activity Log Alert + Action Group (Mobile App notification)
Azure Monitor Metric Alert
Azure Service Health Alert
Application Insights
View Explanation
✓ Correct Answer: Azure Activity Log Alert + Action Group (Mobile App notification)Explanation:Activity Log alerts are designed for tracking operations performed on resources.
7

Scenario: A company is migrating its e-commerce database to Azure SQL. They need to ensure that the credit card information is masked for most users but visible for customer support staff. Which feature should they use?

Dynamic Data Masking (DDM)
Always Encrypted
Transparent Data Encryption (TDE)
VNet Private Link
View Explanation
✓ Correct Answer: Dynamic Data Masking (DDM)Explanation:DDM limits sensitive data exposure by masking it to non-privileged users.
8

Scenario: To reduce latency, a company wants to deploy a global application. They need a database that can handle geo-local reads and writes. Which service is the BEST fit?

Azure Cosmos DB (with Multi-region writes)
Azure SQL Database
Azure Database for MariaDB
Azure SQL Managed Instance
View Explanation
✓ Correct Answer: Azure Cosmos DB (with Multi-region writes)Explanation:Cosmos DB is the only Azure service providing a turnkey multi-region writing capability.
9

Scenario: An administrator needs to move multiple large VMs and their data disks from an on-premises VMWare environment to Azure with minimal downtime. Which service should they use?

Azure Migrate
Azure Data Box
AzCopy
Azure Site Recovery (ASR)
View Explanation
✓ Correct Answer: Azure MigrateExplanation:Azure Migrate provides a centralized hub to assess and migrate on-premises servers and apps.
10

Scenario: A developer wants to run a background task every day at 3 AM to clean up temporary files in a storage account. They want a low-cost, serverless option. What should they use?

Azure Functions (Timer Trigger)
Azure Automation (Runbook)
A scheduled task on an Azure VM
Azure Batch
View Explanation
✓ Correct Answer: Azure Functions (Timer Trigger)Explanation:Functions are perfect for small, event-driven, or scheduled tasks.
11

Scenario: A security team wants to ensure that all virtual machine disks are encrypted using customer-managed keys (CMK). Which service orchestration is needed?

Azure Key Vault + Disk Encryption Set
Azure Storage Account + SAS tokens
Azure Bastion + NSG
Azure Monitor + Log Analytics
View Explanation
✓ Correct Answer: Azure Key Vault + Disk Encryption SetExplanation:Disk Encryption Sets act as a container for your keys and are used to encrypt managed disks with CMK.
12

Scenario: A company needs to host a highly available website that uses a SQL backend. They want to minimize management overhead and ensure the database scales automatically. Which combination is BEST?

Azure App Service + Azure SQL Database (Serverless)
Azure VMs + SQL Server Cluster
Azure Functions + Cosmos DB
Azure Kubernetes Service + MySQL
View Explanation
✓ Correct Answer: Azure App Service + Azure SQL Database (Serverless)Explanation:This PaaS combination provides the least management overhead while meeting all requirements.
13

Scenario: An organization wants to securely connect their mobile workers to several Azure VNets without using a persistent VPN device. Which solution is most appropriate?

Azure Point-to-Site (P2S) VPN
Site-to-Site (S2S) VPN
Azure ExpressRoute
VNet Peering
View Explanation
✓ Correct Answer: Azure Point-to-Site (P2S) VPNExplanation:P2S allows individual devices to connect securely to the VNet with no hardware required on the client side.
14

Scenario: A regulatory requirement mandates that all administrative actions performed in the Azure portal must be reviewed every month. Where can an auditor find this information?

Azure Activity Log
Azure Monitor Metrics
Log Analytics Workspace
Service Health
View Explanation
✓ Correct Answer: Azure Activity LogExplanation:The Activity Log provides a full audit trail of all management (ARM) operations.
15

Scenario: To reduce costs, a company wants to move their dev/test workloads to cheaper VMs that can be interrupted by Azure when capacity is needed. Which VM type should they use?

Azure Spot Virtual Machines
B-series burstable VMs
Reserved Instances
D-series general purpose VMs
View Explanation
✓ Correct Answer: Azure Spot Virtual MachinesExplanation:Spot VMs offer significant discounts but come with no SLA and can be evicted at any time.
16

Scenario: An enterprise needs to consolidate multiple Azure subscriptions into a single hierarchy for centralized policy enforcement and billing. What should they use?

Management Groups
Resource Groups
Tags
Azure Blueprints
View Explanation
✓ Correct Answer: Management GroupsExplanation:Management groups allow you to organize your subscriptions into a hierarchy of 'containers' for easier governance.
17

Your High Performance Computing (HPC) workload requires low network latency between Azure Virtual Machines instances. What feature should you use?

Spread Placement Groups
Azure Virtual Network peering
Azure Load Balancer
Cluster Placement or Proximity Placement Groups
View Explanation
✓ Correct Answer: Cluster Placement or Proximity Placement GroupsExplanation:Placement groups pack instances close together in a single availability zone or data center for low-latency, high-throughput networking.
18

Scenario: An administrator wants to ensure that all newly created storage accounts always use HTTPS. Which tool can enforce this across the entire subscription?

Azure Policy
RBAC
Resource Locks
Azure Advisor
View Explanation
✓ Correct Answer: Azure PolicyExplanation:Azure Policy can audit or deny the creation of resources that do not meet specific security requirements.
19

Scenario: A company wants to use a single set of identity credentials to log into their Azure VMWare solution, Microsoft 365, and Azure VMs. Which identity provider should be used?

Microsoft Entra ID (Azure AD)
Google Identity
On-premises Domain Controller only
A separate identity provider for each service
View Explanation
✓ Correct Answer: Microsoft Entra ID (Azure AD)Explanation:Entra ID is the unified identity platform for all Microsoft cloud services and many third-party apps.
20

You need to create a logically isolated section of your cloud environment where you can launch resources in a virtual network that you define. Which service provides this?

Azure Active Directory (Entra ID)
Azure Virtual Network
Network Security Groups (NSG)
Azure Load Balancer
View Explanation
✓ Correct Answer: Azure Virtual NetworkExplanation:Azure Virtual Network enables you to launch cloud resources in a logically isolated virtual network with full control over IP addressing, subnets, and routing.
21

You are designing a serverless microservices architecture for a new startup. The application needs to handle unpredictable traffic spikes without managing any underlying infrastructure. Which compute service should you use?

Azure Virtual Machines
Azure Functions
Azure Kubernetes Service (AKS)
Azure SQL Database
View Explanation
✓ Correct Answer: Azure FunctionsExplanation:Azure Functions is a serverless compute service that automatically scales with demand, making it ideal for unpredictable traffic without infrastructure management.
22

A financial application requires a relational database that supports high availability and automated backups. The database must be fully managed to reduce operational overhead. Which service fits these requirements?

Azure SQL Database
Azure Blob Storage
Azure Cosmos DB
Azure Virtual Machines
View Explanation
✓ Correct Answer: Azure SQL DatabaseExplanation:Azure SQL Database is a fully managed relational database service that supports high availability and automated backups out of the box.
23

You need to host a static website (HTML, CSS, JS) with the lowest possible cost and high durability. You do not need server-side processing. Which storage solution should you choose?

Azure Managed Disks
Azure Blob Storage configured for static website hosting
Azure Virtual Machines running a web server
Azure SQL Database
View Explanation
✓ Correct Answer: Azure Blob Storage configured for static website hostingExplanation:Azure Blob Storage supports static website hosting directly, offering high durability and low cost compared to running a VM.
24

Your media company streams video content to users globally. Users in different regions are experiencing high latency. You need to improve performance by caching content closer to the users. Which service should you implement?

Azure CDN
Azure Load Balancer
Azure DNS
Azure Virtual Network
View Explanation
✓ Correct Answer: Azure CDNExplanation:Azure CDN caches content at edge locations around the world, significantly reducing latency for global users.
25

Your public-facing web application is under a Distributed Denial of Service (DDoS) attack. You need a managed service to detect and mitigate these attacks automatically. What should you enable?

Azure Active Directory (Entra ID)
Azure DDoS Protection
Azure Key Vault
Azure Virtual Network
View Explanation
✓ Correct Answer: Azure DDoS ProtectionExplanation:Azure DDoS Protection provides always-on detection and automatic inline mitigations to minimize application downtime and latency during a DDoS attack.
26

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Azure Key Vault
Azure Web Application Firewall
Azure Active Directory (Entra ID)
Azure Blob Storage
View Explanation
✓ Correct Answer: Azure Key VaultExplanation:Azure Key Vault is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
27

You are analyzing petabytes of data for business intelligence reports. You need a fully managed, serverless enterprise data warehouse that supports SQL queries. Which service is best suited for this task?

Azure Cosmos DB
Azure SQL Database
Azure Files
Azure Synapse Analytics
View Explanation
✓ Correct Answer: Azure Synapse AnalyticsExplanation:Azure Synapse Analytics is designed for large-scale data warehousing and analytics, allowing you to run SQL queries on petabytes of data.
28

Your application generates millions of clickstream events per second. You need a service to ingest and buffer this data in real-time before processing it. Which service fits this need?

Azure Archive Storage
Azure Functions
Azure SQL Database
Azure Cosmos DB (or Stream service)
View Explanation
✓ Correct Answer: Azure Cosmos DB (or Stream service)Explanation:High-throughput ingestion is a core use case for scalable services like Azure Cosmos DB or dedicated streaming services.
29

Your team wants to automate the provisioning of infrastructure to ensure consistency across environments. You need to define your infrastructure as code (IaC) using declarative templates. Which service should you use?

Azure Virtual Machines
Azure Repos
Azure Pipelines
Azure Resource Manager (ARM)
View Explanation
✓ Correct Answer: Azure Resource Manager (ARM)Explanation:Azure Resource Manager (ARM) allows you to model and provision all your cloud infrastructure resources through code templates.
30

You are designing a CI/CD pipeline. You need a service to compile source code, run tests, and produce software packages that are ready to deploy. Which service handles the build phase?

Azure Resource Manager (ARM)
Azure Pipelines
Azure Functions
Azure Repos
View Explanation
✓ Correct Answer: Azure PipelinesExplanation:Azure Pipelines is a fully managed build service that compiles source code, runs tests, and produces software packages.
31

A law firm wants to digitize millions of scanned contracts. You need an AI service to extract text, forms, and tables from these PDF documents automatically. Which service is designed for this?

Azure Bot Service
Azure Form Recognizer
Azure Speech Services
Azure Computer Vision
View Explanation
✓ Correct Answer: Azure Form RecognizerExplanation:Azure Form Recognizer uses machine learning to extract text, handwriting, and data from scanned documents.
32

You are building a customer support chatbot that needs to understand natural language intent (e.g., 'book a flight'). Which service provides Natural Language Understanding (NLU) capabilities?

Azure Form Recognizer
Azure Machine Learning
Azure Computer Vision
Azure Bot Service
View Explanation
✓ Correct Answer: Azure Bot ServiceExplanation:Azure Bot Service provides conversational AI capabilities to build interfaces like chatbots that understand natural language.
33

Your data science team needs a fully managed environment to build, train, and deploy custom machine learning models using TensorFlow. Which platform provides these end-to-end MLOps capabilities?

Azure Machine Learning
Azure Computer Vision
Azure Bot Service
Azure Speech Services
View Explanation
✓ Correct Answer: Azure Machine LearningExplanation:Azure Machine Learning is the comprehensive platform for the entire machine learning lifecycle, from building models to deployment.
34

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
Share full administrative credentials
Use Azure Virtual Machines instance profiles
Create long-term access keys for each developer
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
35

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Roles with cross-account access
Share access keys between accounts
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Create duplicate users in both accounts
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
36

Your application requires high CPU performance for compute-intensive workloads like video encoding. Which Azure Virtual Machines instance type is optimized for this?

Compute Optimized Azure Virtual Machines instances
Memory Optimized instances
General Purpose instances
Azure Functions
View Explanation
✓ Correct Answer: Compute Optimized Azure Virtual Machines instancesExplanation:Compute Optimized Azure Virtual Machines instances provide high-performance processors ideal for compute-intensive applications.
37

Your High Performance Computing (HPC) workload requires low network latency between Azure Virtual Machines instances. What feature should you use?

Cluster Placement or Proximity Placement Groups
Azure Load Balancer
Azure Virtual Network peering
Spread Placement Groups
View Explanation
✓ Correct Answer: Cluster Placement or Proximity Placement GroupsExplanation:Placement groups pack instances close together in a single availability zone or data center for low-latency, high-throughput networking.
38

Your application requires persistent block storage that survives Azure Virtual Machines instance termination. Which service should you use?

Azure Blob Storage
Ephemeral/Instance Store
Azure Managed Disks
Azure Files
View Explanation
✓ Correct Answer: Azure Managed DisksExplanation:Azure Managed Disks volumes persist independently from virtual machine instances and can be attached/detached as needed.
39

You need to create a backup of your Azure Managed Disks volume for disaster recovery. What feature should you use?

Azure Managed Disks Snapshots
Azure Blob Storage versioning
Azure SQL Database backups
Azure Virtual Machines Image/AMI
View Explanation
✓ Correct Answer: Azure Managed Disks SnapshotsExplanation:Azure Managed Disks Snapshots are incremental backups typically stored in Azure Blob Storage, providing point-in-time recovery.
40

You need to create a logically isolated section of your cloud environment where you can launch resources in a virtual network that you define. Which service provides this?

Azure Virtual Network
Azure Load Balancer
Azure Active Directory (Entra ID)
Network Security Groups (NSG)
View Explanation
✓ Correct Answer: Azure Virtual NetworkExplanation:Azure Virtual Network enables you to launch cloud resources in a logically isolated virtual network with full control over IP addressing, subnets, and routing.
41

You are designing a serverless microservices architecture for a new startup. The application needs to handle unpredictable traffic spikes without managing any underlying infrastructure. Which compute service should you use?

Azure SQL Database
Azure Kubernetes Service (AKS)
Azure Virtual Machines
Azure Functions
View Explanation
✓ Correct Answer: Azure FunctionsExplanation:Azure Functions is a serverless compute service that automatically scales with demand, making it ideal for unpredictable traffic without infrastructure management.
42

A financial application requires a relational database that supports high availability and automated backups. The database must be fully managed to reduce operational overhead. Which service fits these requirements?

Azure SQL Database
Azure Blob Storage
Azure Cosmos DB
Azure Virtual Machines
View Explanation
✓ Correct Answer: Azure SQL DatabaseExplanation:Azure SQL Database is a fully managed relational database service that supports high availability and automated backups out of the box.
43

You need to host a static website (HTML, CSS, JS) with the lowest possible cost and high durability. You do not need server-side processing. Which storage solution should you choose?

Azure Managed Disks
Azure Blob Storage configured for static website hosting
Azure Virtual Machines running a web server
Azure SQL Database
View Explanation
✓ Correct Answer: Azure Blob Storage configured for static website hostingExplanation:Azure Blob Storage supports static website hosting directly, offering high durability and low cost compared to running a VM.
44

Your media company streams video content to users globally. Users in different regions are experiencing high latency. You need to improve performance by caching content closer to the users. Which service should you implement?

Azure CDN
Azure Load Balancer
Azure Virtual Network
Azure DNS
View Explanation
✓ Correct Answer: Azure CDNExplanation:Azure CDN caches content at edge locations around the world, significantly reducing latency for global users.
45

Your public-facing web application is under a Distributed Denial of Service (DDoS) attack. You need a managed service to detect and mitigate these attacks automatically. What should you enable?

Azure Key Vault
Azure Virtual Network
Azure Active Directory (Entra ID)
Azure DDoS Protection
View Explanation
✓ Correct Answer: Azure DDoS ProtectionExplanation:Azure DDoS Protection provides always-on detection and automatic inline mitigations to minimize application downtime and latency during a DDoS attack.
46

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Azure Key Vault
Azure Web Application Firewall
Azure Active Directory (Entra ID)
Azure Blob Storage
View Explanation
✓ Correct Answer: Azure Key VaultExplanation:Azure Key Vault is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
47

You are analyzing petabytes of data for business intelligence reports. You need a fully managed, serverless enterprise data warehouse that supports SQL queries. Which service is best suited for this task?

Azure Files
Azure Cosmos DB
Azure SQL Database
Azure Synapse Analytics
View Explanation
✓ Correct Answer: Azure Synapse AnalyticsExplanation:Azure Synapse Analytics is designed for large-scale data warehousing and analytics, allowing you to run SQL queries on petabytes of data.
48

Your application generates millions of clickstream events per second. You need a service to ingest and buffer this data in real-time before processing it. Which service fits this need?

Azure Cosmos DB (or Stream service)
Azure Archive Storage
Azure SQL Database
Azure Functions
View Explanation
✓ Correct Answer: Azure Cosmos DB (or Stream service)Explanation:High-throughput ingestion is a core use case for scalable services like Azure Cosmos DB or dedicated streaming services.
49

Your team wants to automate the provisioning of infrastructure to ensure consistency across environments. You need to define your infrastructure as code (IaC) using declarative templates. Which service should you use?

Azure Resource Manager (ARM)
Azure Pipelines
Azure Repos
Azure Virtual Machines
View Explanation
✓ Correct Answer: Azure Resource Manager (ARM)Explanation:Azure Resource Manager (ARM) allows you to model and provision all your cloud infrastructure resources through code templates.
50

You are designing a CI/CD pipeline. You need a service to compile source code, run tests, and produce software packages that are ready to deploy. Which service handles the build phase?

Azure Repos
Azure Pipelines
Azure Resource Manager (ARM)
Azure Functions
View Explanation
✓ Correct Answer: Azure PipelinesExplanation:Azure Pipelines is a fully managed build service that compiles source code, runs tests, and produces software packages.
51

A law firm wants to digitize millions of scanned contracts. You need an AI service to extract text, forms, and tables from these PDF documents automatically. Which service is designed for this?

Azure Speech Services
Azure Computer Vision
Azure Form Recognizer
Azure Bot Service
View Explanation
✓ Correct Answer: Azure Form RecognizerExplanation:Azure Form Recognizer uses machine learning to extract text, handwriting, and data from scanned documents.
52

You are building a customer support chatbot that needs to understand natural language intent (e.g., 'book a flight'). Which service provides Natural Language Understanding (NLU) capabilities?

Azure Form Recognizer
Azure Computer Vision
Azure Bot Service
Azure Machine Learning
View Explanation
✓ Correct Answer: Azure Bot ServiceExplanation:Azure Bot Service provides conversational AI capabilities to build interfaces like chatbots that understand natural language.
53

Your data science team needs a fully managed environment to build, train, and deploy custom machine learning models using TensorFlow. Which platform provides these end-to-end MLOps capabilities?

Azure Speech Services
Azure Bot Service
Azure Computer Vision
Azure Machine Learning
View Explanation
✓ Correct Answer: Azure Machine LearningExplanation:Azure Machine Learning is the comprehensive platform for the entire machine learning lifecycle, from building models to deployment.
54

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Create long-term access keys for each developer
Share full administrative credentials
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
Use Azure Virtual Machines instance profiles
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
55

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Share access keys between accounts
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Azure Active Directory (Entra ID) Roles with cross-account access
Create duplicate users in both accounts
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
56

Your application requires high CPU performance for compute-intensive workloads like video encoding. Which Azure Virtual Machines instance type is optimized for this?

General Purpose instances
Azure Functions
Memory Optimized instances
Compute Optimized Azure Virtual Machines instances
View Explanation
✓ Correct Answer: Compute Optimized Azure Virtual Machines instancesExplanation:Compute Optimized Azure Virtual Machines instances provide high-performance processors ideal for compute-intensive applications.
57

Your High Performance Computing (HPC) workload requires low network latency between Azure Virtual Machines instances. What feature should you use?

Azure Virtual Network peering
Azure Load Balancer
Spread Placement Groups
Cluster Placement or Proximity Placement Groups
View Explanation
✓ Correct Answer: Cluster Placement or Proximity Placement GroupsExplanation:Placement groups pack instances close together in a single availability zone or data center for low-latency, high-throughput networking.
58

Your application requires persistent block storage that survives Azure Virtual Machines instance termination. Which service should you use?

Azure Managed Disks
Ephemeral/Instance Store
Azure Files
Azure Blob Storage
View Explanation
✓ Correct Answer: Azure Managed DisksExplanation:Azure Managed Disks volumes persist independently from virtual machine instances and can be attached/detached as needed.
59

You need to create a backup of your Azure Managed Disks volume for disaster recovery. What feature should you use?

Azure Virtual Machines Image/AMI
Azure Managed Disks Snapshots
Azure Blob Storage versioning
Azure SQL Database backups
View Explanation
✓ Correct Answer: Azure Managed Disks SnapshotsExplanation:Azure Managed Disks Snapshots are incremental backups typically stored in Azure Blob Storage, providing point-in-time recovery.
60

You need to create a logically isolated section of your cloud environment where you can launch resources in a virtual network that you define. Which service provides this?

Azure Active Directory (Entra ID)
Azure Load Balancer
Network Security Groups (NSG)
Azure Virtual Network
View Explanation
✓ Correct Answer: Azure Virtual NetworkExplanation:Azure Virtual Network enables you to launch cloud resources in a logically isolated virtual network with full control over IP addressing, subnets, and routing.
61

You are designing a serverless microservices architecture for a new startup. The application needs to handle unpredictable traffic spikes without managing any underlying infrastructure. Which compute service should you use?

Azure Functions
Azure Kubernetes Service (AKS)
Azure Virtual Machines
Azure SQL Database
View Explanation
✓ Correct Answer: Azure FunctionsExplanation:Azure Functions is a serverless compute service that automatically scales with demand, making it ideal for unpredictable traffic without infrastructure management.
62

A financial application requires a relational database that supports high availability and automated backups. The database must be fully managed to reduce operational overhead. Which service fits these requirements?

Azure Blob Storage
Azure Cosmos DB
Azure SQL Database
Azure Virtual Machines
View Explanation
✓ Correct Answer: Azure SQL DatabaseExplanation:Azure SQL Database is a fully managed relational database service that supports high availability and automated backups out of the box.
63

You need to host a static website (HTML, CSS, JS) with the lowest possible cost and high durability. You do not need server-side processing. Which storage solution should you choose?

Azure Managed Disks
Azure Blob Storage configured for static website hosting
Azure Virtual Machines running a web server
Azure SQL Database
View Explanation
✓ Correct Answer: Azure Blob Storage configured for static website hostingExplanation:Azure Blob Storage supports static website hosting directly, offering high durability and low cost compared to running a VM.
64

Your media company streams video content to users globally. Users in different regions are experiencing high latency. You need to improve performance by caching content closer to the users. Which service should you implement?

Azure Load Balancer
Azure Virtual Network
Azure DNS
Azure CDN
View Explanation
✓ Correct Answer: Azure CDNExplanation:Azure CDN caches content at edge locations around the world, significantly reducing latency for global users.
65

Your public-facing web application is under a Distributed Denial of Service (DDoS) attack. You need a managed service to detect and mitigate these attacks automatically. What should you enable?

Azure Active Directory (Entra ID)
Azure Key Vault
Azure Virtual Network
Azure DDoS Protection
View Explanation
✓ Correct Answer: Azure DDoS ProtectionExplanation:Azure DDoS Protection provides always-on detection and automatic inline mitigations to minimize application downtime and latency during a DDoS attack.
66

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Azure Web Application Firewall
Azure Blob Storage
Azure Active Directory (Entra ID)
Azure Key Vault
View Explanation
✓ Correct Answer: Azure Key VaultExplanation:Azure Key Vault is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
67

You are analyzing petabytes of data for business intelligence reports. You need a fully managed, serverless enterprise data warehouse that supports SQL queries. Which service is best suited for this task?

Azure Synapse Analytics
Azure Cosmos DB
Azure Files
Azure SQL Database
View Explanation
✓ Correct Answer: Azure Synapse AnalyticsExplanation:Azure Synapse Analytics is designed for large-scale data warehousing and analytics, allowing you to run SQL queries on petabytes of data.
68

Your application generates millions of clickstream events per second. You need a service to ingest and buffer this data in real-time before processing it. Which service fits this need?

Azure Functions
Azure Cosmos DB (or Stream service)
Azure Archive Storage
Azure SQL Database
View Explanation
✓ Correct Answer: Azure Cosmos DB (or Stream service)Explanation:High-throughput ingestion is a core use case for scalable services like Azure Cosmos DB or dedicated streaming services.
69

Your team wants to automate the provisioning of infrastructure to ensure consistency across environments. You need to define your infrastructure as code (IaC) using declarative templates. Which service should you use?

Azure Virtual Machines
Azure Repos
Azure Pipelines
Azure Resource Manager (ARM)
View Explanation
✓ Correct Answer: Azure Resource Manager (ARM)Explanation:Azure Resource Manager (ARM) allows you to model and provision all your cloud infrastructure resources through code templates.
70

You are designing a CI/CD pipeline. You need a service to compile source code, run tests, and produce software packages that are ready to deploy. Which service handles the build phase?

Azure Functions
Azure Pipelines
Azure Repos
Azure Resource Manager (ARM)
View Explanation
✓ Correct Answer: Azure PipelinesExplanation:Azure Pipelines is a fully managed build service that compiles source code, runs tests, and produces software packages.
71

A law firm wants to digitize millions of scanned contracts. You need an AI service to extract text, forms, and tables from these PDF documents automatically. Which service is designed for this?

Azure Bot Service
Azure Computer Vision
Azure Speech Services
Azure Form Recognizer
View Explanation
✓ Correct Answer: Azure Form RecognizerExplanation:Azure Form Recognizer uses machine learning to extract text, handwriting, and data from scanned documents.
72

You are building a customer support chatbot that needs to understand natural language intent (e.g., 'book a flight'). Which service provides Natural Language Understanding (NLU) capabilities?

Azure Machine Learning
Azure Form Recognizer
Azure Computer Vision
Azure Bot Service
View Explanation
✓ Correct Answer: Azure Bot ServiceExplanation:Azure Bot Service provides conversational AI capabilities to build interfaces like chatbots that understand natural language.
73

Your data science team needs a fully managed environment to build, train, and deploy custom machine learning models using TensorFlow. Which platform provides these end-to-end MLOps capabilities?

Azure Speech Services
Azure Machine Learning
Azure Computer Vision
Azure Bot Service
View Explanation
✓ Correct Answer: Azure Machine LearningExplanation:Azure Machine Learning is the comprehensive platform for the entire machine learning lifecycle, from building models to deployment.
74

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Use Azure Virtual Machines instance profiles
Create long-term access keys for each developer
Share full administrative credentials
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
75

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Roles with cross-account access
Share access keys between accounts
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Create duplicate users in both accounts
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
76

Your application requires high CPU performance for compute-intensive workloads like video encoding. Which Azure Virtual Machines instance type is optimized for this?

Compute Optimized Azure Virtual Machines instances
Memory Optimized instances
General Purpose instances
Azure Functions
View Explanation
✓ Correct Answer: Compute Optimized Azure Virtual Machines instancesExplanation:Compute Optimized Azure Virtual Machines instances provide high-performance processors ideal for compute-intensive applications.
77

Your High Performance Computing (HPC) workload requires low network latency between Azure Virtual Machines instances. What feature should you use?

Cluster Placement or Proximity Placement Groups
Spread Placement Groups
Azure Load Balancer
Azure Virtual Network peering
View Explanation
✓ Correct Answer: Cluster Placement or Proximity Placement GroupsExplanation:Placement groups pack instances close together in a single availability zone or data center for low-latency, high-throughput networking.
78

Your application requires persistent block storage that survives Azure Virtual Machines instance termination. Which service should you use?

Azure Managed Disks
Ephemeral/Instance Store
Azure Files
Azure Blob Storage
View Explanation
✓ Correct Answer: Azure Managed DisksExplanation:Azure Managed Disks volumes persist independently from virtual machine instances and can be attached/detached as needed.
79

You need to create a backup of your Azure Managed Disks volume for disaster recovery. What feature should you use?

Azure Virtual Machines Image/AMI
Azure Blob Storage versioning
Azure SQL Database backups
Azure Managed Disks Snapshots
View Explanation
✓ Correct Answer: Azure Managed Disks SnapshotsExplanation:Azure Managed Disks Snapshots are incremental backups typically stored in Azure Blob Storage, providing point-in-time recovery.
80

You need to create a logically isolated section of your cloud environment where you can launch resources in a virtual network that you define. Which service provides this?

Azure Active Directory (Entra ID)
Azure Load Balancer
Network Security Groups (NSG)
Azure Virtual Network
View Explanation
✓ Correct Answer: Azure Virtual NetworkExplanation:Azure Virtual Network enables you to launch cloud resources in a logically isolated virtual network with full control over IP addressing, subnets, and routing.
81

You are designing a serverless microservices architecture for a new startup. The application needs to handle unpredictable traffic spikes without managing any underlying infrastructure. Which compute service should you use?

Azure Functions
Azure Virtual Machines
Azure Kubernetes Service (AKS)
Azure SQL Database
View Explanation
✓ Correct Answer: Azure FunctionsExplanation:Azure Functions is a serverless compute service that automatically scales with demand, making it ideal for unpredictable traffic without infrastructure management.
82

A financial application requires a relational database that supports high availability and automated backups. The database must be fully managed to reduce operational overhead. Which service fits these requirements?

Azure Blob Storage
Azure Cosmos DB
Azure SQL Database
Azure Virtual Machines
View Explanation
✓ Correct Answer: Azure SQL DatabaseExplanation:Azure SQL Database is a fully managed relational database service that supports high availability and automated backups out of the box.
83

You need to host a static website (HTML, CSS, JS) with the lowest possible cost and high durability. You do not need server-side processing. Which storage solution should you choose?

Azure SQL Database
Azure Managed Disks
Azure Virtual Machines running a web server
Azure Blob Storage configured for static website hosting
View Explanation
✓ Correct Answer: Azure Blob Storage configured for static website hostingExplanation:Azure Blob Storage supports static website hosting directly, offering high durability and low cost compared to running a VM.
84

Your media company streams video content to users globally. Users in different regions are experiencing high latency. You need to improve performance by caching content closer to the users. Which service should you implement?

Azure Load Balancer
Azure CDN
Azure Virtual Network
Azure DNS
View Explanation
✓ Correct Answer: Azure CDNExplanation:Azure CDN caches content at edge locations around the world, significantly reducing latency for global users.
85

Your public-facing web application is under a Distributed Denial of Service (DDoS) attack. You need a managed service to detect and mitigate these attacks automatically. What should you enable?

Azure DDoS Protection
Azure Virtual Network
Azure Key Vault
Azure Active Directory (Entra ID)
View Explanation
✓ Correct Answer: Azure DDoS ProtectionExplanation:Azure DDoS Protection provides always-on detection and automatic inline mitigations to minimize application downtime and latency during a DDoS attack.
86

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Azure Blob Storage
Azure Active Directory (Entra ID)
Azure Web Application Firewall
Azure Key Vault
View Explanation
✓ Correct Answer: Azure Key VaultExplanation:Azure Key Vault is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
87

You are analyzing petabytes of data for business intelligence reports. You need a fully managed, serverless enterprise data warehouse that supports SQL queries. Which service is best suited for this task?

Azure Synapse Analytics
Azure Files
Azure Cosmos DB
Azure SQL Database
View Explanation
✓ Correct Answer: Azure Synapse AnalyticsExplanation:Azure Synapse Analytics is designed for large-scale data warehousing and analytics, allowing you to run SQL queries on petabytes of data.
88

Your application generates millions of clickstream events per second. You need a service to ingest and buffer this data in real-time before processing it. Which service fits this need?

Azure Cosmos DB (or Stream service)
Azure Archive Storage
Azure SQL Database
Azure Functions
View Explanation
✓ Correct Answer: Azure Cosmos DB (or Stream service)Explanation:High-throughput ingestion is a core use case for scalable services like Azure Cosmos DB or dedicated streaming services.
89

Your team wants to automate the provisioning of infrastructure to ensure consistency across environments. You need to define your infrastructure as code (IaC) using declarative templates. Which service should you use?

Azure Repos
Azure Pipelines
Azure Resource Manager (ARM)
Azure Virtual Machines
View Explanation
✓ Correct Answer: Azure Resource Manager (ARM)Explanation:Azure Resource Manager (ARM) allows you to model and provision all your cloud infrastructure resources through code templates.
90

You are designing a CI/CD pipeline. You need a service to compile source code, run tests, and produce software packages that are ready to deploy. Which service handles the build phase?

Azure Functions
Azure Repos
Azure Resource Manager (ARM)
Azure Pipelines
View Explanation
✓ Correct Answer: Azure PipelinesExplanation:Azure Pipelines is a fully managed build service that compiles source code, runs tests, and produces software packages.
91

A law firm wants to digitize millions of scanned contracts. You need an AI service to extract text, forms, and tables from these PDF documents automatically. Which service is designed for this?

Azure Speech Services
Azure Bot Service
Azure Form Recognizer
Azure Computer Vision
View Explanation
✓ Correct Answer: Azure Form RecognizerExplanation:Azure Form Recognizer uses machine learning to extract text, handwriting, and data from scanned documents.
92

You are building a customer support chatbot that needs to understand natural language intent (e.g., 'book a flight'). Which service provides Natural Language Understanding (NLU) capabilities?

Azure Computer Vision
Azure Bot Service
Azure Machine Learning
Azure Form Recognizer
View Explanation
✓ Correct Answer: Azure Bot ServiceExplanation:Azure Bot Service provides conversational AI capabilities to build interfaces like chatbots that understand natural language.
93

Your data science team needs a fully managed environment to build, train, and deploy custom machine learning models using TensorFlow. Which platform provides these end-to-end MLOps capabilities?

Azure Machine Learning
Azure Computer Vision
Azure Bot Service
Azure Speech Services
View Explanation
✓ Correct Answer: Azure Machine LearningExplanation:Azure Machine Learning is the comprehensive platform for the entire machine learning lifecycle, from building models to deployment.
94

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
Use Azure Virtual Machines instance profiles
Share full administrative credentials
Create long-term access keys for each developer
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
95

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Create duplicate users in both accounts
Share access keys between accounts
Azure Active Directory (Entra ID) Roles with cross-account access
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
96

Your application requires high CPU performance for compute-intensive workloads like video encoding. Which Azure Virtual Machines instance type is optimized for this?

Azure Functions
Compute Optimized Azure Virtual Machines instances
Memory Optimized instances
General Purpose instances
View Explanation
✓ Correct Answer: Compute Optimized Azure Virtual Machines instancesExplanation:Compute Optimized Azure Virtual Machines instances provide high-performance processors ideal for compute-intensive applications.
97

Your High Performance Computing (HPC) workload requires low network latency between Azure Virtual Machines instances. What feature should you use?

Azure Load Balancer
Spread Placement Groups
Cluster Placement or Proximity Placement Groups
Azure Virtual Network peering
View Explanation
✓ Correct Answer: Cluster Placement or Proximity Placement GroupsExplanation:Placement groups pack instances close together in a single availability zone or data center for low-latency, high-throughput networking.
98

Your application requires persistent block storage that survives Azure Virtual Machines instance termination. Which service should you use?

Azure Blob Storage
Azure Managed Disks
Ephemeral/Instance Store
Azure Files
View Explanation
✓ Correct Answer: Azure Managed DisksExplanation:Azure Managed Disks volumes persist independently from virtual machine instances and can be attached/detached as needed.
99

You need to create a backup of your Azure Managed Disks volume for disaster recovery. What feature should you use?

Azure Blob Storage versioning
Azure SQL Database backups
Azure Virtual Machines Image/AMI
Azure Managed Disks Snapshots
View Explanation
✓ Correct Answer: Azure Managed Disks SnapshotsExplanation:Azure Managed Disks Snapshots are incremental backups typically stored in Azure Blob Storage, providing point-in-time recovery.
100

You need to create a logically isolated section of your cloud environment where you can launch resources in a virtual network that you define. Which service provides this?

Network Security Groups (NSG)
Azure Virtual Network
Azure Active Directory (Entra ID)
Azure Load Balancer
View Explanation
✓ Correct Answer: Azure Virtual NetworkExplanation:Azure Virtual Network enables you to launch cloud resources in a logically isolated virtual network with full control over IP addressing, subnets, and routing.
101

You are designing a serverless microservices architecture for a new startup. The application needs to handle unpredictable traffic spikes without managing any underlying infrastructure. Which compute service should you use?

Azure Kubernetes Service (AKS)
Azure Virtual Machines
Azure Functions
Azure SQL Database
View Explanation
✓ Correct Answer: Azure FunctionsExplanation:Azure Functions is a serverless compute service that automatically scales with demand, making it ideal for unpredictable traffic without infrastructure management.
102

A financial application requires a relational database that supports high availability and automated backups. The database must be fully managed to reduce operational overhead. Which service fits these requirements?

Azure SQL Database
Azure Cosmos DB
Azure Blob Storage
Azure Virtual Machines
View Explanation
✓ Correct Answer: Azure SQL DatabaseExplanation:Azure SQL Database is a fully managed relational database service that supports high availability and automated backups out of the box.
103

You need to host a static website (HTML, CSS, JS) with the lowest possible cost and high durability. You do not need server-side processing. Which storage solution should you choose?

Azure Blob Storage configured for static website hosting
Azure Virtual Machines running a web server
Azure SQL Database
Azure Managed Disks
View Explanation
✓ Correct Answer: Azure Blob Storage configured for static website hostingExplanation:Azure Blob Storage supports static website hosting directly, offering high durability and low cost compared to running a VM.
104

Your media company streams video content to users globally. Users in different regions are experiencing high latency. You need to improve performance by caching content closer to the users. Which service should you implement?

Azure CDN
Azure Virtual Network
Azure DNS
Azure Load Balancer
View Explanation
✓ Correct Answer: Azure CDNExplanation:Azure CDN caches content at edge locations around the world, significantly reducing latency for global users.
105

Your public-facing web application is under a Distributed Denial of Service (DDoS) attack. You need a managed service to detect and mitigate these attacks automatically. What should you enable?

Azure Key Vault
Azure Virtual Network
Azure Active Directory (Entra ID)
Azure DDoS Protection
View Explanation
✓ Correct Answer: Azure DDoS ProtectionExplanation:Azure DDoS Protection provides always-on detection and automatic inline mitigations to minimize application downtime and latency during a DDoS attack.
106

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Azure Active Directory (Entra ID)
Azure Blob Storage
Azure Web Application Firewall
Azure Key Vault
View Explanation
✓ Correct Answer: Azure Key VaultExplanation:Azure Key Vault is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
107

You are analyzing petabytes of data for business intelligence reports. You need a fully managed, serverless enterprise data warehouse that supports SQL queries. Which service is best suited for this task?

Azure Files
Azure Cosmos DB
Azure SQL Database
Azure Synapse Analytics
View Explanation
✓ Correct Answer: Azure Synapse AnalyticsExplanation:Azure Synapse Analytics is designed for large-scale data warehousing and analytics, allowing you to run SQL queries on petabytes of data.
108

Your application generates millions of clickstream events per second. You need a service to ingest and buffer this data in real-time before processing it. Which service fits this need?

Azure Cosmos DB (or Stream service)
Azure Archive Storage
Azure Functions
Azure SQL Database
View Explanation
✓ Correct Answer: Azure Cosmos DB (or Stream service)Explanation:High-throughput ingestion is a core use case for scalable services like Azure Cosmos DB or dedicated streaming services.
109

Your team wants to automate the provisioning of infrastructure to ensure consistency across environments. You need to define your infrastructure as code (IaC) using declarative templates. Which service should you use?

Azure Pipelines
Azure Resource Manager (ARM)
Azure Repos
Azure Virtual Machines
View Explanation
✓ Correct Answer: Azure Resource Manager (ARM)Explanation:Azure Resource Manager (ARM) allows you to model and provision all your cloud infrastructure resources through code templates.
110

You are designing a CI/CD pipeline. You need a service to compile source code, run tests, and produce software packages that are ready to deploy. Which service handles the build phase?

Azure Resource Manager (ARM)
Azure Pipelines
Azure Repos
Azure Functions
View Explanation
✓ Correct Answer: Azure PipelinesExplanation:Azure Pipelines is a fully managed build service that compiles source code, runs tests, and produces software packages.
111

A law firm wants to digitize millions of scanned contracts. You need an AI service to extract text, forms, and tables from these PDF documents automatically. Which service is designed for this?

Azure Form Recognizer
Azure Bot Service
Azure Speech Services
Azure Computer Vision
View Explanation
✓ Correct Answer: Azure Form RecognizerExplanation:Azure Form Recognizer uses machine learning to extract text, handwriting, and data from scanned documents.
112

You are building a customer support chatbot that needs to understand natural language intent (e.g., 'book a flight'). Which service provides Natural Language Understanding (NLU) capabilities?

Azure Bot Service
Azure Form Recognizer
Azure Machine Learning
Azure Computer Vision
View Explanation
✓ Correct Answer: Azure Bot ServiceExplanation:Azure Bot Service provides conversational AI capabilities to build interfaces like chatbots that understand natural language.
113

Your data science team needs a fully managed environment to build, train, and deploy custom machine learning models using TensorFlow. Which platform provides these end-to-end MLOps capabilities?

Azure Speech Services
Azure Bot Service
Azure Computer Vision
Azure Machine Learning
View Explanation
✓ Correct Answer: Azure Machine LearningExplanation:Azure Machine Learning is the comprehensive platform for the entire machine learning lifecycle, from building models to deployment.
114

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Use Azure Virtual Machines instance profiles
Share full administrative credentials
Create long-term access keys for each developer
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
115

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Roles with cross-account access
Share access keys between accounts
Create duplicate users in both accounts
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
116

Your application requires high CPU performance for compute-intensive workloads like video encoding. Which Azure Virtual Machines instance type is optimized for this?

Azure Functions
Memory Optimized instances
General Purpose instances
Compute Optimized Azure Virtual Machines instances
View Explanation
✓ Correct Answer: Compute Optimized Azure Virtual Machines instancesExplanation:Compute Optimized Azure Virtual Machines instances provide high-performance processors ideal for compute-intensive applications.
117

Your High Performance Computing (HPC) workload requires low network latency between Azure Virtual Machines instances. What feature should you use?

Spread Placement Groups
Azure Virtual Network peering
Azure Load Balancer
Cluster Placement or Proximity Placement Groups
View Explanation
✓ Correct Answer: Cluster Placement or Proximity Placement GroupsExplanation:Placement groups pack instances close together in a single availability zone or data center for low-latency, high-throughput networking.
118

Your application requires persistent block storage that survives Azure Virtual Machines instance termination. Which service should you use?

Azure Managed Disks
Azure Files
Ephemeral/Instance Store
Azure Blob Storage
View Explanation
✓ Correct Answer: Azure Managed DisksExplanation:Azure Managed Disks volumes persist independently from virtual machine instances and can be attached/detached as needed.
119

You need to create a backup of your Azure Managed Disks volume for disaster recovery. What feature should you use?

Azure Managed Disks Snapshots
Azure SQL Database backups
Azure Blob Storage versioning
Azure Virtual Machines Image/AMI
View Explanation
✓ Correct Answer: Azure Managed Disks SnapshotsExplanation:Azure Managed Disks Snapshots are incremental backups typically stored in Azure Blob Storage, providing point-in-time recovery.
120

You need to create a logically isolated section of your cloud environment where you can launch resources in a virtual network that you define. Which service provides this?

Network Security Groups (NSG)
Azure Active Directory (Entra ID)
Azure Virtual Network
Azure Load Balancer
View Explanation
✓ Correct Answer: Azure Virtual NetworkExplanation:Azure Virtual Network enables you to launch cloud resources in a logically isolated virtual network with full control over IP addressing, subnets, and routing.
121

You are designing a serverless microservices architecture for a new startup. The application needs to handle unpredictable traffic spikes without managing any underlying infrastructure. Which compute service should you use?

Azure SQL Database
Azure Kubernetes Service (AKS)
Azure Virtual Machines
Azure Functions
View Explanation
✓ Correct Answer: Azure FunctionsExplanation:Azure Functions is a serverless compute service that automatically scales with demand, making it ideal for unpredictable traffic without infrastructure management.
122

A financial application requires a relational database that supports high availability and automated backups. The database must be fully managed to reduce operational overhead. Which service fits these requirements?

Azure SQL Database
Azure Cosmos DB
Azure Blob Storage
Azure Virtual Machines
View Explanation
✓ Correct Answer: Azure SQL DatabaseExplanation:Azure SQL Database is a fully managed relational database service that supports high availability and automated backups out of the box.
123

You need to host a static website (HTML, CSS, JS) with the lowest possible cost and high durability. You do not need server-side processing. Which storage solution should you choose?

Azure Blob Storage configured for static website hosting
Azure Managed Disks
Azure SQL Database
Azure Virtual Machines running a web server
View Explanation
✓ Correct Answer: Azure Blob Storage configured for static website hostingExplanation:Azure Blob Storage supports static website hosting directly, offering high durability and low cost compared to running a VM.
124

Your media company streams video content to users globally. Users in different regions are experiencing high latency. You need to improve performance by caching content closer to the users. Which service should you implement?

Azure Load Balancer
Azure CDN
Azure Virtual Network
Azure DNS
View Explanation
✓ Correct Answer: Azure CDNExplanation:Azure CDN caches content at edge locations around the world, significantly reducing latency for global users.
125

Your public-facing web application is under a Distributed Denial of Service (DDoS) attack. You need a managed service to detect and mitigate these attacks automatically. What should you enable?

Azure Key Vault
Azure Active Directory (Entra ID)
Azure DDoS Protection
Azure Virtual Network
View Explanation
✓ Correct Answer: Azure DDoS ProtectionExplanation:Azure DDoS Protection provides always-on detection and automatic inline mitigations to minimize application downtime and latency during a DDoS attack.
126

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Azure Active Directory (Entra ID)
Azure Key Vault
Azure Blob Storage
Azure Web Application Firewall
View Explanation
✓ Correct Answer: Azure Key VaultExplanation:Azure Key Vault is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
127

You are analyzing petabytes of data for business intelligence reports. You need a fully managed, serverless enterprise data warehouse that supports SQL queries. Which service is best suited for this task?

Azure Synapse Analytics
Azure SQL Database
Azure Cosmos DB
Azure Files
View Explanation
✓ Correct Answer: Azure Synapse AnalyticsExplanation:Azure Synapse Analytics is designed for large-scale data warehousing and analytics, allowing you to run SQL queries on petabytes of data.
128

Your application generates millions of clickstream events per second. You need a service to ingest and buffer this data in real-time before processing it. Which service fits this need?

Azure Functions
Azure SQL Database
Azure Archive Storage
Azure Cosmos DB (or Stream service)
View Explanation
✓ Correct Answer: Azure Cosmos DB (or Stream service)Explanation:High-throughput ingestion is a core use case for scalable services like Azure Cosmos DB or dedicated streaming services.
129

Your team wants to automate the provisioning of infrastructure to ensure consistency across environments. You need to define your infrastructure as code (IaC) using declarative templates. Which service should you use?

Azure Resource Manager (ARM)
Azure Pipelines
Azure Repos
Azure Virtual Machines
View Explanation
✓ Correct Answer: Azure Resource Manager (ARM)Explanation:Azure Resource Manager (ARM) allows you to model and provision all your cloud infrastructure resources through code templates.
130

You are designing a CI/CD pipeline. You need a service to compile source code, run tests, and produce software packages that are ready to deploy. Which service handles the build phase?

Azure Repos
Azure Resource Manager (ARM)
Azure Pipelines
Azure Functions
View Explanation
✓ Correct Answer: Azure PipelinesExplanation:Azure Pipelines is a fully managed build service that compiles source code, runs tests, and produces software packages.
131

A law firm wants to digitize millions of scanned contracts. You need an AI service to extract text, forms, and tables from these PDF documents automatically. Which service is designed for this?

Azure Speech Services
Azure Computer Vision
Azure Form Recognizer
Azure Bot Service
View Explanation
✓ Correct Answer: Azure Form RecognizerExplanation:Azure Form Recognizer uses machine learning to extract text, handwriting, and data from scanned documents.
132

You are building a customer support chatbot that needs to understand natural language intent (e.g., 'book a flight'). Which service provides Natural Language Understanding (NLU) capabilities?

Azure Machine Learning
Azure Form Recognizer
Azure Bot Service
Azure Computer Vision
View Explanation
✓ Correct Answer: Azure Bot ServiceExplanation:Azure Bot Service provides conversational AI capabilities to build interfaces like chatbots that understand natural language.
133

Your data science team needs a fully managed environment to build, train, and deploy custom machine learning models using TensorFlow. Which platform provides these end-to-end MLOps capabilities?

Azure Bot Service
Azure Speech Services
Azure Machine Learning
Azure Computer Vision
View Explanation
✓ Correct Answer: Azure Machine LearningExplanation:Azure Machine Learning is the comprehensive platform for the entire machine learning lifecycle, from building models to deployment.
134

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
Share full administrative credentials
Use Azure Virtual Machines instance profiles
Create long-term access keys for each developer
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
135

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Roles with cross-account access
Share access keys between accounts
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Create duplicate users in both accounts
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
136

Your application requires high CPU performance for compute-intensive workloads like video encoding. Which Azure Virtual Machines instance type is optimized for this?

Memory Optimized instances
Azure Functions
Compute Optimized Azure Virtual Machines instances
General Purpose instances
View Explanation
✓ Correct Answer: Compute Optimized Azure Virtual Machines instancesExplanation:Compute Optimized Azure Virtual Machines instances provide high-performance processors ideal for compute-intensive applications.
137

Your High Performance Computing (HPC) workload requires low network latency between Azure Virtual Machines instances. What feature should you use?

Azure Virtual Network peering
Azure Load Balancer
Spread Placement Groups
Cluster Placement or Proximity Placement Groups
View Explanation
✓ Correct Answer: Cluster Placement or Proximity Placement GroupsExplanation:Placement groups pack instances close together in a single availability zone or data center for low-latency, high-throughput networking.
138

Your application requires persistent block storage that survives Azure Virtual Machines instance termination. Which service should you use?

Azure Files
Azure Blob Storage
Ephemeral/Instance Store
Azure Managed Disks
View Explanation
✓ Correct Answer: Azure Managed DisksExplanation:Azure Managed Disks volumes persist independently from virtual machine instances and can be attached/detached as needed.
139

You need to create a backup of your Azure Managed Disks volume for disaster recovery. What feature should you use?

Azure Managed Disks Snapshots
Azure Virtual Machines Image/AMI
Azure Blob Storage versioning
Azure SQL Database backups
View Explanation
✓ Correct Answer: Azure Managed Disks SnapshotsExplanation:Azure Managed Disks Snapshots are incremental backups typically stored in Azure Blob Storage, providing point-in-time recovery.
140

You need to create a logically isolated section of your cloud environment where you can launch resources in a virtual network that you define. Which service provides this?

Azure Active Directory (Entra ID)
Azure Load Balancer
Azure Virtual Network
Network Security Groups (NSG)
View Explanation
✓ Correct Answer: Azure Virtual NetworkExplanation:Azure Virtual Network enables you to launch cloud resources in a logically isolated virtual network with full control over IP addressing, subnets, and routing.
141

You are designing a serverless microservices architecture for a new startup. The application needs to handle unpredictable traffic spikes without managing any underlying infrastructure. Which compute service should you use?

Azure Functions
Azure Virtual Machines
Azure Kubernetes Service (AKS)
Azure SQL Database
View Explanation
✓ Correct Answer: Azure FunctionsExplanation:Azure Functions is a serverless compute service that automatically scales with demand, making it ideal for unpredictable traffic without infrastructure management.
142

A financial application requires a relational database that supports high availability and automated backups. The database must be fully managed to reduce operational overhead. Which service fits these requirements?

Azure SQL Database
Azure Blob Storage
Azure Cosmos DB
Azure Virtual Machines
View Explanation
✓ Correct Answer: Azure SQL DatabaseExplanation:Azure SQL Database is a fully managed relational database service that supports high availability and automated backups out of the box.
143

You need to host a static website (HTML, CSS, JS) with the lowest possible cost and high durability. You do not need server-side processing. Which storage solution should you choose?

Azure Blob Storage configured for static website hosting
Azure Virtual Machines running a web server
Azure Managed Disks
Azure SQL Database
View Explanation
✓ Correct Answer: Azure Blob Storage configured for static website hostingExplanation:Azure Blob Storage supports static website hosting directly, offering high durability and low cost compared to running a VM.
144

Your media company streams video content to users globally. Users in different regions are experiencing high latency. You need to improve performance by caching content closer to the users. Which service should you implement?

Azure Virtual Network
Azure DNS
Azure Load Balancer
Azure CDN
View Explanation
✓ Correct Answer: Azure CDNExplanation:Azure CDN caches content at edge locations around the world, significantly reducing latency for global users.
145

Your public-facing web application is under a Distributed Denial of Service (DDoS) attack. You need a managed service to detect and mitigate these attacks automatically. What should you enable?

Azure Key Vault
Azure Active Directory (Entra ID)
Azure DDoS Protection
Azure Virtual Network
View Explanation
✓ Correct Answer: Azure DDoS ProtectionExplanation:Azure DDoS Protection provides always-on detection and automatic inline mitigations to minimize application downtime and latency during a DDoS attack.
146

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Azure Web Application Firewall
Azure Key Vault
Azure Blob Storage
Azure Active Directory (Entra ID)
View Explanation
✓ Correct Answer: Azure Key VaultExplanation:Azure Key Vault is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
147

You are analyzing petabytes of data for business intelligence reports. You need a fully managed, serverless enterprise data warehouse that supports SQL queries. Which service is best suited for this task?

Azure Cosmos DB
Azure Synapse Analytics
Azure Files
Azure SQL Database
View Explanation
✓ Correct Answer: Azure Synapse AnalyticsExplanation:Azure Synapse Analytics is designed for large-scale data warehousing and analytics, allowing you to run SQL queries on petabytes of data.
148

Your application generates millions of clickstream events per second. You need a service to ingest and buffer this data in real-time before processing it. Which service fits this need?

Azure Cosmos DB (or Stream service)
Azure Archive Storage
Azure SQL Database
Azure Functions
View Explanation
✓ Correct Answer: Azure Cosmos DB (or Stream service)Explanation:High-throughput ingestion is a core use case for scalable services like Azure Cosmos DB or dedicated streaming services.
149

Your team wants to automate the provisioning of infrastructure to ensure consistency across environments. You need to define your infrastructure as code (IaC) using declarative templates. Which service should you use?

Azure Virtual Machines
Azure Repos
Azure Pipelines
Azure Resource Manager (ARM)
View Explanation
✓ Correct Answer: Azure Resource Manager (ARM)Explanation:Azure Resource Manager (ARM) allows you to model and provision all your cloud infrastructure resources through code templates.
150

You are designing a CI/CD pipeline. You need a service to compile source code, run tests, and produce software packages that are ready to deploy. Which service handles the build phase?

Azure Pipelines
Azure Repos
Azure Resource Manager (ARM)
Azure Functions
View Explanation
✓ Correct Answer: Azure PipelinesExplanation:Azure Pipelines is a fully managed build service that compiles source code, runs tests, and produces software packages.
151

A law firm wants to digitize millions of scanned contracts. You need an AI service to extract text, forms, and tables from these PDF documents automatically. Which service is designed for this?

Azure Computer Vision
Azure Bot Service
Azure Speech Services
Azure Form Recognizer
View Explanation
✓ Correct Answer: Azure Form RecognizerExplanation:Azure Form Recognizer uses machine learning to extract text, handwriting, and data from scanned documents.
152

You are building a customer support chatbot that needs to understand natural language intent (e.g., 'book a flight'). Which service provides Natural Language Understanding (NLU) capabilities?

Azure Form Recognizer
Azure Bot Service
Azure Computer Vision
Azure Machine Learning
View Explanation
✓ Correct Answer: Azure Bot ServiceExplanation:Azure Bot Service provides conversational AI capabilities to build interfaces like chatbots that understand natural language.
153

Your data science team needs a fully managed environment to build, train, and deploy custom machine learning models using TensorFlow. Which platform provides these end-to-end MLOps capabilities?

Azure Machine Learning
Azure Computer Vision
Azure Bot Service
Azure Speech Services
View Explanation
✓ Correct Answer: Azure Machine LearningExplanation:Azure Machine Learning is the comprehensive platform for the entire machine learning lifecycle, from building models to deployment.
154

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
Share full administrative credentials
Create long-term access keys for each developer
Use Azure Virtual Machines instance profiles
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
155

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Create duplicate users in both accounts
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Share access keys between accounts
Azure Active Directory (Entra ID) Roles with cross-account access
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
156

Your application requires high CPU performance for compute-intensive workloads like video encoding. Which Azure Virtual Machines instance type is optimized for this?

Azure Functions
General Purpose instances
Memory Optimized instances
Compute Optimized Azure Virtual Machines instances
View Explanation
✓ Correct Answer: Compute Optimized Azure Virtual Machines instancesExplanation:Compute Optimized Azure Virtual Machines instances provide high-performance processors ideal for compute-intensive applications.
157

Your High Performance Computing (HPC) workload requires low network latency between Azure Virtual Machines instances. What feature should you use?

Azure Load Balancer
Spread Placement Groups
Cluster Placement or Proximity Placement Groups
Azure Virtual Network peering
View Explanation
✓ Correct Answer: Cluster Placement or Proximity Placement GroupsExplanation:Placement groups pack instances close together in a single availability zone or data center for low-latency, high-throughput networking.
158

Your application requires persistent block storage that survives Azure Virtual Machines instance termination. Which service should you use?

Azure Files
Azure Managed Disks
Ephemeral/Instance Store
Azure Blob Storage
View Explanation
✓ Correct Answer: Azure Managed DisksExplanation:Azure Managed Disks volumes persist independently from virtual machine instances and can be attached/detached as needed.
159

You need to create a backup of your Azure Managed Disks volume for disaster recovery. What feature should you use?

Azure Virtual Machines Image/AMI
Azure SQL Database backups
Azure Blob Storage versioning
Azure Managed Disks Snapshots
View Explanation
✓ Correct Answer: Azure Managed Disks SnapshotsExplanation:Azure Managed Disks Snapshots are incremental backups typically stored in Azure Blob Storage, providing point-in-time recovery.
160

You need to create a logically isolated section of your cloud environment where you can launch resources in a virtual network that you define. Which service provides this?

Network Security Groups (NSG)
Azure Load Balancer
Azure Active Directory (Entra ID)
Azure Virtual Network
View Explanation
✓ Correct Answer: Azure Virtual NetworkExplanation:Azure Virtual Network enables you to launch cloud resources in a logically isolated virtual network with full control over IP addressing, subnets, and routing.
161

You are designing a serverless microservices architecture for a new startup. The application needs to handle unpredictable traffic spikes without managing any underlying infrastructure. Which compute service should you use?

Azure SQL Database
Azure Functions
Azure Virtual Machines
Azure Kubernetes Service (AKS)
View Explanation
✓ Correct Answer: Azure FunctionsExplanation:Azure Functions is a serverless compute service that automatically scales with demand, making it ideal for unpredictable traffic without infrastructure management.
162

A financial application requires a relational database that supports high availability and automated backups. The database must be fully managed to reduce operational overhead. Which service fits these requirements?

Azure Virtual Machines
Azure Blob Storage
Azure Cosmos DB
Azure SQL Database
View Explanation
✓ Correct Answer: Azure SQL DatabaseExplanation:Azure SQL Database is a fully managed relational database service that supports high availability and automated backups out of the box.
163

You need to host a static website (HTML, CSS, JS) with the lowest possible cost and high durability. You do not need server-side processing. Which storage solution should you choose?

Azure Managed Disks
Azure SQL Database
Azure Virtual Machines running a web server
Azure Blob Storage configured for static website hosting
View Explanation
✓ Correct Answer: Azure Blob Storage configured for static website hostingExplanation:Azure Blob Storage supports static website hosting directly, offering high durability and low cost compared to running a VM.
164

Your media company streams video content to users globally. Users in different regions are experiencing high latency. You need to improve performance by caching content closer to the users. Which service should you implement?

Azure DNS
Azure Load Balancer
Azure Virtual Network
Azure CDN
View Explanation
✓ Correct Answer: Azure CDNExplanation:Azure CDN caches content at edge locations around the world, significantly reducing latency for global users.
165

Your public-facing web application is under a Distributed Denial of Service (DDoS) attack. You need a managed service to detect and mitigate these attacks automatically. What should you enable?

Azure Virtual Network
Azure Key Vault
Azure Active Directory (Entra ID)
Azure DDoS Protection
View Explanation
✓ Correct Answer: Azure DDoS ProtectionExplanation:Azure DDoS Protection provides always-on detection and automatic inline mitigations to minimize application downtime and latency during a DDoS attack.
166

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Azure Active Directory (Entra ID)
Azure Web Application Firewall
Azure Key Vault
Azure Blob Storage
View Explanation
✓ Correct Answer: Azure Key VaultExplanation:Azure Key Vault is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
167

You are analyzing petabytes of data for business intelligence reports. You need a fully managed, serverless enterprise data warehouse that supports SQL queries. Which service is best suited for this task?

Azure Cosmos DB
Azure Files
Azure SQL Database
Azure Synapse Analytics
View Explanation
✓ Correct Answer: Azure Synapse AnalyticsExplanation:Azure Synapse Analytics is designed for large-scale data warehousing and analytics, allowing you to run SQL queries on petabytes of data.
168

Your application generates millions of clickstream events per second. You need a service to ingest and buffer this data in real-time before processing it. Which service fits this need?

Azure SQL Database
Azure Archive Storage
Azure Functions
Azure Cosmos DB (or Stream service)
View Explanation
✓ Correct Answer: Azure Cosmos DB (or Stream service)Explanation:High-throughput ingestion is a core use case for scalable services like Azure Cosmos DB or dedicated streaming services.
169

Your team wants to automate the provisioning of infrastructure to ensure consistency across environments. You need to define your infrastructure as code (IaC) using declarative templates. Which service should you use?

Azure Repos
Azure Virtual Machines
Azure Pipelines
Azure Resource Manager (ARM)
View Explanation
✓ Correct Answer: Azure Resource Manager (ARM)Explanation:Azure Resource Manager (ARM) allows you to model and provision all your cloud infrastructure resources through code templates.
170

You are designing a CI/CD pipeline. You need a service to compile source code, run tests, and produce software packages that are ready to deploy. Which service handles the build phase?

Azure Functions
Azure Resource Manager (ARM)
Azure Repos
Azure Pipelines
View Explanation
✓ Correct Answer: Azure PipelinesExplanation:Azure Pipelines is a fully managed build service that compiles source code, runs tests, and produces software packages.
171

A law firm wants to digitize millions of scanned contracts. You need an AI service to extract text, forms, and tables from these PDF documents automatically. Which service is designed for this?

Azure Bot Service
Azure Computer Vision
Azure Speech Services
Azure Form Recognizer
View Explanation
✓ Correct Answer: Azure Form RecognizerExplanation:Azure Form Recognizer uses machine learning to extract text, handwriting, and data from scanned documents.
172

You are building a customer support chatbot that needs to understand natural language intent (e.g., 'book a flight'). Which service provides Natural Language Understanding (NLU) capabilities?

Azure Machine Learning
Azure Form Recognizer
Azure Computer Vision
Azure Bot Service
View Explanation
✓ Correct Answer: Azure Bot ServiceExplanation:Azure Bot Service provides conversational AI capabilities to build interfaces like chatbots that understand natural language.
173

Your data science team needs a fully managed environment to build, train, and deploy custom machine learning models using TensorFlow. Which platform provides these end-to-end MLOps capabilities?

Azure Bot Service
Azure Speech Services
Azure Computer Vision
Azure Machine Learning
View Explanation
✓ Correct Answer: Azure Machine LearningExplanation:Azure Machine Learning is the comprehensive platform for the entire machine learning lifecycle, from building models to deployment.
174

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
Use Azure Virtual Machines instance profiles
Share full administrative credentials
Create long-term access keys for each developer
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
175

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Roles with cross-account access
Share access keys between accounts
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Create duplicate users in both accounts
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
176

Your application requires high CPU performance for compute-intensive workloads like video encoding. Which Azure Virtual Machines instance type is optimized for this?

Compute Optimized Azure Virtual Machines instances
Azure Functions
Memory Optimized instances
General Purpose instances
View Explanation
✓ Correct Answer: Compute Optimized Azure Virtual Machines instancesExplanation:Compute Optimized Azure Virtual Machines instances provide high-performance processors ideal for compute-intensive applications.
177

Your High Performance Computing (HPC) workload requires low network latency between Azure Virtual Machines instances. What feature should you use?

Spread Placement Groups
Azure Load Balancer
Azure Virtual Network peering
Cluster Placement or Proximity Placement Groups
View Explanation
✓ Correct Answer: Cluster Placement or Proximity Placement GroupsExplanation:Placement groups pack instances close together in a single availability zone or data center for low-latency, high-throughput networking.
178

Your application requires persistent block storage that survives Azure Virtual Machines instance termination. Which service should you use?

Azure Files
Azure Blob Storage
Ephemeral/Instance Store
Azure Managed Disks
View Explanation
✓ Correct Answer: Azure Managed DisksExplanation:Azure Managed Disks volumes persist independently from virtual machine instances and can be attached/detached as needed.
179

You need to create a backup of your Azure Managed Disks volume for disaster recovery. What feature should you use?

Azure Managed Disks Snapshots
Azure Virtual Machines Image/AMI
Azure Blob Storage versioning
Azure SQL Database backups
View Explanation
✓ Correct Answer: Azure Managed Disks SnapshotsExplanation:Azure Managed Disks Snapshots are incremental backups typically stored in Azure Blob Storage, providing point-in-time recovery.
180

You need to create a logically isolated section of your cloud environment where you can launch resources in a virtual network that you define. Which service provides this?

Azure Load Balancer
Network Security Groups (NSG)
Azure Virtual Network
Azure Active Directory (Entra ID)
View Explanation
✓ Correct Answer: Azure Virtual NetworkExplanation:Azure Virtual Network enables you to launch cloud resources in a logically isolated virtual network with full control over IP addressing, subnets, and routing.
181

You are designing a serverless microservices architecture for a new startup. The application needs to handle unpredictable traffic spikes without managing any underlying infrastructure. Which compute service should you use?

Azure SQL Database
Azure Functions
Azure Virtual Machines
Azure Kubernetes Service (AKS)
View Explanation
✓ Correct Answer: Azure FunctionsExplanation:Azure Functions is a serverless compute service that automatically scales with demand, making it ideal for unpredictable traffic without infrastructure management.
182

A financial application requires a relational database that supports high availability and automated backups. The database must be fully managed to reduce operational overhead. Which service fits these requirements?

Azure Virtual Machines
Azure Blob Storage
Azure Cosmos DB
Azure SQL Database
View Explanation
✓ Correct Answer: Azure SQL DatabaseExplanation:Azure SQL Database is a fully managed relational database service that supports high availability and automated backups out of the box.
183

You need to host a static website (HTML, CSS, JS) with the lowest possible cost and high durability. You do not need server-side processing. Which storage solution should you choose?

Azure Blob Storage configured for static website hosting
Azure Virtual Machines running a web server
Azure Managed Disks
Azure SQL Database
View Explanation
✓ Correct Answer: Azure Blob Storage configured for static website hostingExplanation:Azure Blob Storage supports static website hosting directly, offering high durability and low cost compared to running a VM.
184

Your media company streams video content to users globally. Users in different regions are experiencing high latency. You need to improve performance by caching content closer to the users. Which service should you implement?

Azure CDN
Azure Load Balancer
Azure Virtual Network
Azure DNS
View Explanation
✓ Correct Answer: Azure CDNExplanation:Azure CDN caches content at edge locations around the world, significantly reducing latency for global users.
185

Your public-facing web application is under a Distributed Denial of Service (DDoS) attack. You need a managed service to detect and mitigate these attacks automatically. What should you enable?

Azure DDoS Protection
Azure Key Vault
Azure Active Directory (Entra ID)
Azure Virtual Network
View Explanation
✓ Correct Answer: Azure DDoS ProtectionExplanation:Azure DDoS Protection provides always-on detection and automatic inline mitigations to minimize application downtime and latency during a DDoS attack.
186

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Azure Key Vault
Azure Web Application Firewall
Azure Blob Storage
Azure Active Directory (Entra ID)
View Explanation
✓ Correct Answer: Azure Key VaultExplanation:Azure Key Vault is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
187

You are analyzing petabytes of data for business intelligence reports. You need a fully managed, serverless enterprise data warehouse that supports SQL queries. Which service is best suited for this task?

Azure Cosmos DB
Azure Synapse Analytics
Azure SQL Database
Azure Files
View Explanation
✓ Correct Answer: Azure Synapse AnalyticsExplanation:Azure Synapse Analytics is designed for large-scale data warehousing and analytics, allowing you to run SQL queries on petabytes of data.
188

Your application generates millions of clickstream events per second. You need a service to ingest and buffer this data in real-time before processing it. Which service fits this need?

Azure Archive Storage
Azure SQL Database
Azure Cosmos DB (or Stream service)
Azure Functions
View Explanation
✓ Correct Answer: Azure Cosmos DB (or Stream service)Explanation:High-throughput ingestion is a core use case for scalable services like Azure Cosmos DB or dedicated streaming services.
189

Your team wants to automate the provisioning of infrastructure to ensure consistency across environments. You need to define your infrastructure as code (IaC) using declarative templates. Which service should you use?

Azure Pipelines
Azure Repos
Azure Virtual Machines
Azure Resource Manager (ARM)
View Explanation
✓ Correct Answer: Azure Resource Manager (ARM)Explanation:Azure Resource Manager (ARM) allows you to model and provision all your cloud infrastructure resources through code templates.
190

You are designing a CI/CD pipeline. You need a service to compile source code, run tests, and produce software packages that are ready to deploy. Which service handles the build phase?

Azure Functions
Azure Pipelines
Azure Repos
Azure Resource Manager (ARM)
View Explanation
✓ Correct Answer: Azure PipelinesExplanation:Azure Pipelines is a fully managed build service that compiles source code, runs tests, and produces software packages.
191

A law firm wants to digitize millions of scanned contracts. You need an AI service to extract text, forms, and tables from these PDF documents automatically. Which service is designed for this?

Azure Bot Service
Azure Computer Vision
Azure Speech Services
Azure Form Recognizer
View Explanation
✓ Correct Answer: Azure Form RecognizerExplanation:Azure Form Recognizer uses machine learning to extract text, handwriting, and data from scanned documents.
192

You are building a customer support chatbot that needs to understand natural language intent (e.g., 'book a flight'). Which service provides Natural Language Understanding (NLU) capabilities?

Azure Form Recognizer
Azure Bot Service
Azure Computer Vision
Azure Machine Learning
View Explanation
✓ Correct Answer: Azure Bot ServiceExplanation:Azure Bot Service provides conversational AI capabilities to build interfaces like chatbots that understand natural language.
193

Your data science team needs a fully managed environment to build, train, and deploy custom machine learning models using TensorFlow. Which platform provides these end-to-end MLOps capabilities?

Azure Speech Services
Azure Computer Vision
Azure Machine Learning
Azure Bot Service
View Explanation
✓ Correct Answer: Azure Machine LearningExplanation:Azure Machine Learning is the comprehensive platform for the entire machine learning lifecycle, from building models to deployment.
194

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Use Azure Virtual Machines instance profiles
Create long-term access keys for each developer
Share full administrative credentials
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
195

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Roles with cross-account access
Share access keys between accounts
Create duplicate users in both accounts
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
196

Your application requires high CPU performance for compute-intensive workloads like video encoding. Which Azure Virtual Machines instance type is optimized for this?

Azure Functions
Compute Optimized Azure Virtual Machines instances
Memory Optimized instances
General Purpose instances
View Explanation
✓ Correct Answer: Compute Optimized Azure Virtual Machines instancesExplanation:Compute Optimized Azure Virtual Machines instances provide high-performance processors ideal for compute-intensive applications.
197

Your High Performance Computing (HPC) workload requires low network latency between Azure Virtual Machines instances. What feature should you use?

Azure Load Balancer
Spread Placement Groups
Azure Virtual Network peering
Cluster Placement or Proximity Placement Groups
View Explanation
✓ Correct Answer: Cluster Placement or Proximity Placement GroupsExplanation:Placement groups pack instances close together in a single availability zone or data center for low-latency, high-throughput networking.
198

Your application requires persistent block storage that survives Azure Virtual Machines instance termination. Which service should you use?

Azure Blob Storage
Azure Files
Azure Managed Disks
Ephemeral/Instance Store
View Explanation
✓ Correct Answer: Azure Managed DisksExplanation:Azure Managed Disks volumes persist independently from virtual machine instances and can be attached/detached as needed.
199

You need to create a backup of your Azure Managed Disks volume for disaster recovery. What feature should you use?

Azure SQL Database backups
Azure Virtual Machines Image/AMI
Azure Blob Storage versioning
Azure Managed Disks Snapshots
View Explanation
✓ Correct Answer: Azure Managed Disks SnapshotsExplanation:Azure Managed Disks Snapshots are incremental backups typically stored in Azure Blob Storage, providing point-in-time recovery.
200

You need to create a logically isolated section of your cloud environment where you can launch resources in a virtual network that you define. Which service provides this?

Azure Active Directory (Entra ID)
Azure Virtual Network
Azure Load Balancer
Network Security Groups (NSG)
View Explanation
✓ Correct Answer: Azure Virtual NetworkExplanation:Azure Virtual Network enables you to launch cloud resources in a logically isolated virtual network with full control over IP addressing, subnets, and routing.
201

You are designing a serverless microservices architecture for a new startup. The application needs to handle unpredictable traffic spikes without managing any underlying infrastructure. Which compute service should you use?

Azure Functions
Azure Virtual Machines
Azure Kubernetes Service (AKS)
Azure SQL Database
View Explanation
✓ Correct Answer: Azure FunctionsExplanation:Azure Functions is a serverless compute service that automatically scales with demand, making it ideal for unpredictable traffic without infrastructure management.
202

A financial application requires a relational database that supports high availability and automated backups. The database must be fully managed to reduce operational overhead. Which service fits these requirements?

Azure SQL Database
Azure Virtual Machines
Azure Cosmos DB
Azure Blob Storage
View Explanation
✓ Correct Answer: Azure SQL DatabaseExplanation:Azure SQL Database is a fully managed relational database service that supports high availability and automated backups out of the box.
203

You need to host a static website (HTML, CSS, JS) with the lowest possible cost and high durability. You do not need server-side processing. Which storage solution should you choose?

Azure Managed Disks
Azure Virtual Machines running a web server
Azure Blob Storage configured for static website hosting
Azure SQL Database
View Explanation
✓ Correct Answer: Azure Blob Storage configured for static website hostingExplanation:Azure Blob Storage supports static website hosting directly, offering high durability and low cost compared to running a VM.
204

Your media company streams video content to users globally. Users in different regions are experiencing high latency. You need to improve performance by caching content closer to the users. Which service should you implement?

Azure Load Balancer
Azure CDN
Azure DNS
Azure Virtual Network
View Explanation
✓ Correct Answer: Azure CDNExplanation:Azure CDN caches content at edge locations around the world, significantly reducing latency for global users.
205

Your public-facing web application is under a Distributed Denial of Service (DDoS) attack. You need a managed service to detect and mitigate these attacks automatically. What should you enable?

Azure Active Directory (Entra ID)
Azure DDoS Protection
Azure Virtual Network
Azure Key Vault
View Explanation
✓ Correct Answer: Azure DDoS ProtectionExplanation:Azure DDoS Protection provides always-on detection and automatic inline mitigations to minimize application downtime and latency during a DDoS attack.
206

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Azure Key Vault
Azure Active Directory (Entra ID)
Azure Web Application Firewall
Azure Blob Storage
View Explanation
✓ Correct Answer: Azure Key VaultExplanation:Azure Key Vault is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
207

You are analyzing petabytes of data for business intelligence reports. You need a fully managed, serverless enterprise data warehouse that supports SQL queries. Which service is best suited for this task?

Azure Synapse Analytics
Azure SQL Database
Azure Cosmos DB
Azure Files
View Explanation
✓ Correct Answer: Azure Synapse AnalyticsExplanation:Azure Synapse Analytics is designed for large-scale data warehousing and analytics, allowing you to run SQL queries on petabytes of data.
208

Your application generates millions of clickstream events per second. You need a service to ingest and buffer this data in real-time before processing it. Which service fits this need?

Azure Cosmos DB (or Stream service)
Azure SQL Database
Azure Archive Storage
Azure Functions
View Explanation
✓ Correct Answer: Azure Cosmos DB (or Stream service)Explanation:High-throughput ingestion is a core use case for scalable services like Azure Cosmos DB or dedicated streaming services.
209

Your team wants to automate the provisioning of infrastructure to ensure consistency across environments. You need to define your infrastructure as code (IaC) using declarative templates. Which service should you use?

Azure Resource Manager (ARM)
Azure Pipelines
Azure Repos
Azure Virtual Machines
View Explanation
✓ Correct Answer: Azure Resource Manager (ARM)Explanation:Azure Resource Manager (ARM) allows you to model and provision all your cloud infrastructure resources through code templates.
210

You are designing a CI/CD pipeline. You need a service to compile source code, run tests, and produce software packages that are ready to deploy. Which service handles the build phase?

Azure Pipelines
Azure Resource Manager (ARM)
Azure Functions
Azure Repos
View Explanation
✓ Correct Answer: Azure PipelinesExplanation:Azure Pipelines is a fully managed build service that compiles source code, runs tests, and produces software packages.
211

A law firm wants to digitize millions of scanned contracts. You need an AI service to extract text, forms, and tables from these PDF documents automatically. Which service is designed for this?

Azure Computer Vision
Azure Bot Service
Azure Speech Services
Azure Form Recognizer
View Explanation
✓ Correct Answer: Azure Form RecognizerExplanation:Azure Form Recognizer uses machine learning to extract text, handwriting, and data from scanned documents.
212

You are building a customer support chatbot that needs to understand natural language intent (e.g., 'book a flight'). Which service provides Natural Language Understanding (NLU) capabilities?

Azure Bot Service
Azure Computer Vision
Azure Machine Learning
Azure Form Recognizer
View Explanation
✓ Correct Answer: Azure Bot ServiceExplanation:Azure Bot Service provides conversational AI capabilities to build interfaces like chatbots that understand natural language.
213

Your data science team needs a fully managed environment to build, train, and deploy custom machine learning models using TensorFlow. Which platform provides these end-to-end MLOps capabilities?

Azure Speech Services
Azure Bot Service
Azure Computer Vision
Azure Machine Learning
View Explanation
✓ Correct Answer: Azure Machine LearningExplanation:Azure Machine Learning is the comprehensive platform for the entire machine learning lifecycle, from building models to deployment.
214

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
Share full administrative credentials
Create long-term access keys for each developer
Use Azure Virtual Machines instance profiles
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
215

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Roles with cross-account access
Share access keys between accounts
Create duplicate users in both accounts
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
216

Your application requires high CPU performance for compute-intensive workloads like video encoding. Which Azure Virtual Machines instance type is optimized for this?

Compute Optimized Azure Virtual Machines instances
Memory Optimized instances
General Purpose instances
Azure Functions
View Explanation
✓ Correct Answer: Compute Optimized Azure Virtual Machines instancesExplanation:Compute Optimized Azure Virtual Machines instances provide high-performance processors ideal for compute-intensive applications.
217

Your High Performance Computing (HPC) workload requires low network latency between Azure Virtual Machines instances. What feature should you use?

Cluster Placement or Proximity Placement Groups
Azure Load Balancer
Azure Virtual Network peering
Spread Placement Groups
View Explanation
✓ Correct Answer: Cluster Placement or Proximity Placement GroupsExplanation:Placement groups pack instances close together in a single availability zone or data center for low-latency, high-throughput networking.
218

Your application requires persistent block storage that survives Azure Virtual Machines instance termination. Which service should you use?

Ephemeral/Instance Store
Azure Files
Azure Blob Storage
Azure Managed Disks
View Explanation
✓ Correct Answer: Azure Managed DisksExplanation:Azure Managed Disks volumes persist independently from virtual machine instances and can be attached/detached as needed.
219

You need to create a backup of your Azure Managed Disks volume for disaster recovery. What feature should you use?

Azure Managed Disks Snapshots
Azure Virtual Machines Image/AMI
Azure Blob Storage versioning
Azure SQL Database backups
View Explanation
✓ Correct Answer: Azure Managed Disks SnapshotsExplanation:Azure Managed Disks Snapshots are incremental backups typically stored in Azure Blob Storage, providing point-in-time recovery.
220

You need to create a logically isolated section of your cloud environment where you can launch resources in a virtual network that you define. Which service provides this?

Azure Virtual Network
Network Security Groups (NSG)
Azure Load Balancer
Azure Active Directory (Entra ID)
View Explanation
✓ Correct Answer: Azure Virtual NetworkExplanation:Azure Virtual Network enables you to launch cloud resources in a logically isolated virtual network with full control over IP addressing, subnets, and routing.
221

An enterprise wants to implement a centralized governance strategy for their 50+ Azure subscriptions. They want to ensure that every resource group is automatically tagged with a 'Department' name and that no one can create a G-series VM instance due to cost. Which Azure service should they use to enforce these rules?

Azure Policy
Azure RBAC
Management Groups
Azure Blueprints
View Explanation
✓ Correct Answer: Azure PolicyExplanation:Azure Policy is the primary service for enforcing organizational standards and assessing compliance at scale across subscriptions.
222

Scenario: To reduce the cost of an idle development environment, you want to automatically shut down all virtual machines at 6 PM and restart them at 8 AM. Which native Azure feature handles this?

Auto-shutdown feature in DevTest Labs or VM settings
Azure Automation with a Runbook
Azure Monitor
Azure Advisor
View Explanation
✓ Correct Answer: Auto-shutdown feature in DevTest Labs or VM settingsExplanation:Azure VMs have a built-in 'Auto-shutdown' feature that is simple to configure for non-production environments.
223

Your application requires a globally distributed database that supports multiple data models (Document, Key-Value, Graph) and provides 'Single-digit millisecond' latency for both reads and writes. Which service fits?

Azure Cosmos DB
Azure Cache for Redis
Azure SQL Database
Azure Table Storage
View Explanation
✓ Correct Answer: Azure Cosmos DBExplanation:Cosmos DB is a multi-model, globally distributed database service optimized for high-performance and scalability.
224

Scenario: To minimize the risk of a single engineer making a catastrophic change, you want to ensure that any change to the production environment's 'Lock' settings requires an approval from a second administrator. Solution ?

Implement 'Multi-Party Approval' using Azure DevOPS pipelines with manual intervention stages and RBAC
Use a shared administrative account
Delete the Azure portal access
Use Azure Policy to deny locks
View Explanation
✓ Correct Answer: Implement 'Multi-Party Approval' using Azure DevOPS pipelines with manual intervention stages and RBACExplanation:Formalizing the release process through pipelines with mandatory approvals is the most effective way to prevent unauthorized or accidental changes.
225

An organization wants to run their massive Big Data analytics workload using a managed Apache Spark and Hadoop service. They want a solution that integrates natively with Azure Data Lake Storage Gen2. Which service should they choose?

Azure HDInsight
Azure Synapse Analytics
Azure Databricks
Azure Functions
View Explanation
✓ Correct Answer: Azure HDInsightExplanation:HDInsight is the managed Hadoop/Spark service in Azure, offering a wide range of open-source frameworks.
226

Which Azure machine learning service provides a 'No-Code' experience for building, training, and deploying models using a drag-and-drop interface?

Azure Machine Learning Designer
Azure Machine Learning Studio (Classic)
Azure Cognitive Services
Azure Synapse
View Explanation
✓ Correct Answer: Azure Machine Learning DesignerExplanation:Designer is the modern, integrated no-code tool within the Azure Machine Learning workspace.
227

An organization wants to move their legacy .NET applications to Azure with minimal code changes. They want a managed platform that handles OS patching, scaling, and provides easy integration with Azure AD. Which service should they use?

Azure App Service
Azure Functions
Azure VM Scale Sets
Azure Container Instances
View Explanation
✓ Correct Answer: Azure App ServiceExplanation:App Service is a fully managed platform (PaaS) for building, deploying, and scaling web apps.
228

How can you analyze why your Azure costs were higher than expected last month by identifying exactly which resource changed in configuration or usage?

Azure Cost Management (Cost analysis with grouping by resource)
Azure Advisor
Azure Policy
Azure Monitor
View Explanation
✓ Correct Answer: Azure Cost Management (Cost analysis with grouping by resource)Explanation:Cost Management provides granular visibility into spending, allowing you to drill down into specific resources and timeframes.
229

An organization wants to run their Docker-based microservices on Azure in a 'Serverless' way where they don't have to manage the underlying Kubernetes master or nodes. Which compute option should they choose?

Azure Container Apps
Azure Kubernetes Service (AKS)
Azure Container Instances (ACI)
Web App for Containers
View Explanation
✓ Correct Answer: Azure Container AppsExplanation:Azure Container Apps is a serverless platform that simplifies the deployment of microservices and background jobs.
230

Scenario: To minimize the latency for users in Europe accessing an application hosted in East US, you decide to deploy a second set of resources in West Europe. What is the most architectural way to route users to the closest healthy region?

Azure Front Door or Azure Traffic Manager
Manual IP routing
VNet Peering
ExpressRoute
View Explanation
✓ Correct Answer: Azure Front Door or Azure Traffic ManagerExplanation:Front Door and Traffic Manager are global routing services that use latency-based routing to ensure the best possible user experience.
231

An organization is using Azure Cosmos DB for a global retail application. They want to ensure that users in any region always see the most recent data immediately after a write (zero lag), even if it means sacrificing some availability during regional partitioning. Which consistency level should they choose?

Strong
Bounded Staleness
Session
Eventual
View Explanation
✓ Correct Answer: StrongExplanation:Strong consistency guarantees that a read always returns the most recent version of an item, but it can lead to higher latency and lower availability during failures.
232

You are designing a data integration pipeline that needs to ingest data from 50 different on-premises SQL Server databases and move it to Azure Synapse Analytics daily. Which service should you use to orchestrate this complex data movement and transformation?

Azure Data Factory
Azure Stream Analytics
Azure Event Hubs
Azure Functions
View Explanation
✓ Correct Answer: Azure Data FactoryExplanation:Azure Data Factory is the primary ETL/ELT service in Azure for building and orchestrating data-driven workflows.
233

Your company has multiple Azure subscriptions and wants to analyze their total spend across all of them in a single dashboard. They want to create custom 'Cost Tags' to attribute costs to specific internal projects. Which tool provides this capability?

Azure Cost Management + Billing
Azure Advisor
Azure Policy
Management Groups
View Explanation
✓ Correct Answer: Azure Cost Management + BillingExplanation:Cost Management allows for enterprise-wide visibility and reporting, including the use of tags for cost allocation.
234

An organization wants to run a serverless, event-driven function that triggers whenever a new file is uploaded to an Azure Blob storage container. Which service is best for this small, short-lived task?

Azure Functions
Azure Logic Apps
Azure Batch
Azure Container Instances
View Explanation
✓ Correct Answer: Azure FunctionsExplanation:Azure Functions is the primary serverless compute service for event-driven logic.
235

Scenario: To improve the resiliency of a mission-critical web application, you want to ensure that if an entire Azure region goes offline, your traffic is automatically failed over to a secondary region. Which global load balancing service should you use?

Azure Traffic Manager or Azure Front Door
Azure Application Gateway
Azure Load Balancer
VNet Peering
View Explanation
✓ Correct Answer: Azure Traffic Manager or Azure Front DoorExplanation:Traffic Manager (DNS-based) and Front Door (Anycast-based) are global services designed for regional failover and disaster recovery.
236

An organization wants to migrate their on-premises VMWare environment to Azure without refactoring their applications or changing their operational processes. Which Azure service provides a dedicated VMWare environment in the cloud?

Azure VMware Solution (AVS)
Azure Migrate
Azure Batch
Azure VM Scale Sets
View Explanation
✓ Correct Answer: Azure VMware Solution (AVS)Explanation:AVS allows you to run VMware natively on Azure, providing continuity for skills and processes while leveraging Azure's scale.
237

Your organization wants to move their complex analytical workload from an on-premises Hadoop cluster to Azure. They want a service that integrates with Azure Data Lake Storage Gen2 and provides a unified interface for data exploration, data warehousing, and big data processing. Which service should they choose?

Azure Synapse Analytics
Azure Data Factory
Azure HDInsight
Azure Databricks
View Explanation
✓ Correct Answer: Azure Synapse AnalyticsExplanation:Synapse Analytics is an integrated analytics service that accelerates time to insight across data warehouses and big data systems.
238

To ensure that your web application provides the best possible performance for users in Asia, you want to route their traffic to the nearest Azure region. Which global routing service should you use?

Azure Traffic Manager (Performance routing) or Azure Front Door
Azure Load Balancer
Azure Application Gateway
ExpressRoute
View Explanation
✓ Correct Answer: Azure Traffic Manager (Performance routing) or Azure Front DoorExplanation:Traffic Manager and Front Door provide latency-based routing to ensure users are directed to the closest healthy endpoint.
239

Which Azure data service provides a fully managed, scalable PostgreSQL database with 'Citus' integration for sharding and scaling out horizontally across multiple nodes?

Azure Cosmos DB for PostgreSQL
Azure SQL Database
Azure Database for PostgreSQL (Flexible Server)
Azure Synapse Analytics
View Explanation
✓ Correct Answer: Azure Cosmos DB for PostgreSQLExplanation:Cosmos DB for PostgreSQL (formerly Hyperscale Citus) allows you to scale out PostgreSQL workloads to handle massive data sets and high throughput.
240

Scenario: To lower the cost of a data processing job that runs for 4 hours every night, you want to use virtual machines that provide a fixed discount in exchange for a 3-year commitment. Solution ?

Azure Reserved Virtual Machine Instances
Azure Spot VMs
Pay-As-You-Go
Azure Savings Plans
View Explanation
✓ Correct Answer: Azure Reserved Virtual Machine InstancesExplanation:Reserved Instances offer significant discounts (up to 72%) for committed usage over a 1-year or 3-year term.
241

Your organization wants to transition their monolithic application from On-premises to Azure and wants to use a managed platform that handles auto-scaling and provides a 'Zero Trust' access experience for their employees. Which Azure service should they use for a web-based monolith?

Azure App Service (with Entra ID authentication and VNet integration)
Azure Container Apps
Azure VM Scale Sets
Azure Functions
View Explanation
✓ Correct Answer: Azure App Service (with Entra ID authentication and VNet integration)Explanation:App Service with built-in authentication (Easy Auth) and Private Endpoints/VNet integration is a standard pattern for secure and scalable app modernization.
242

Which Azure service allows you to centrally manage and deploy API schemas, enforce usage quotas, and provide a developer portal for your internal and external application developers?

Azure API Management (APIM)
Azure Application Gateway
Azure Front Door
Azure Functions
View Explanation
✓ Correct Answer: Azure API Management (APIM)Explanation:APIM is a hybrid, multi-cloud management platform for APIs across all environments, offering security, analytics, and a developer portal.
243

You are hosting a real-time data ingestion system using Azure Event Hubs. You need a way to ensure that if a data consumer fails, the data is not lost and can be replayed from a specific point in time. Which Event Hubs feature enables this?

Event Hubs 'Capture' and 'Long-term retention'
Event Hubs 'Standard' tier with 1-day retention
Azure Stream Analytics
VNet Peering
View Explanation
✓ Correct Answer: Event Hubs 'Capture' and 'Long-term retention'Explanation:Capture automatically sends streaming data to Azure Blob storage or Data Lake, and retention settings allow consumers to read data that was previously processed.
244

An organization following the 'Least Privilege' principle wants to restrict all developers from creating new storage accounts that do not have 'Blob public access' disabled. How should they implement this organizational control?

Azure Policy with a 'Deny' effect on storage account creation with the publicAccess property enabled
Azure RBAC on the resource group
Microsoft Defender for Cloud
Log Analytics alerts
View Explanation
✓ Correct Answer: Azure Policy with a 'Deny' effect on storage account creation with the publicAccess property enabledExplanation:Azure Policy is the most effective way to prevent non-compliant resources from being created in the first place.
245

Scenario: To reduce the cost of an Azure environment used for short-term projects (less than 30 days), you want to use a purchasing option that offers significant discounts for ephemeral workloads that can be interrupted. Solution ?

Azure Spot Virtual Machines
Azure Savings Plans
Pay-As-You-Go
Azure Reservations
View Explanation
✓ Correct Answer: Azure Spot Virtual MachinesExplanation:Spot VMs are ideal for short-term, interruptible workloads like testing, batch processing, or development.
246

You are building a serverless application that needs to coordinate several logic apps, functions, and external services in a long-running, stateful workflow. Which service is best for this orchestration?

Azure Durable Functions
Azure Logic Apps (Consumption)
Azure Event Grid
Azure Batch
View Explanation
✓ Correct Answer: Azure Durable FunctionsExplanation:Durable Functions is an extension of Azure Functions that lets you write stateful functions in a serverless environment.
247

In Azure Cosmos DB, what is the primary purpose of 'Analytical Store' for an organization building a data lake for real-time analytics?

It provides a column-oriented storage for running complex analytical queries without impacting the performance of the transactional workloads
It makes Cosmos DB cheaper
It is used for backups
It automatically scales the database
View Explanation
✓ Correct Answer: It provides a column-oriented storage for running complex analytical queries without impacting the performance of the transactional workloadsExplanation:Analytical Store is a fully isolated column store that enables near-real-time analytics on your operational data using Azure Synapse Link.
248

A media company wants to use AI to automatically generate subtitles for their video library in 20 different languages. Which Azure service provides pre-trained models for speech-to-text and translation?

Azure AI Speech (formerly Cognitive Services)
Azure Machine Learning
Azure Video Indexer
Azure Functions
View Explanation
✓ Correct Answer: Azure AI Speech (formerly Cognitive Services)Explanation:Azure AI Speech provides high-quality speech-to-text, text-to-speech, and translation capabilities.
249

An organization wants to use Azure Arc to manage their multi-cloud environment. They want to ensure that their on-premises Windows and Linux servers can be managed using Azure Policy and RBAC just like Azure VMs. Which Azure Arc feature is required?

Azure Arc-enabled servers
Azure Arc-enabled SQL Server
Azure Arc-enabled Kubernetes
Azure Virtual Desktop
View Explanation
✓ Correct Answer: Azure Arc-enabled serversExplanation:Arc-enabled servers extend the Azure control plane to non-Azure machines, allowing for unified management and governance.
250

Your organization is running a massive Docker-based application on Azure and wants to ensure that they are using the most cost-effective compute platform that provides high scalability and integration with Azure VNet security. Which service fits best for simple microservices?

Azure Container Apps
Azure Kubernetes Service (AKS)
Azure Functions
Azure VM Scale Sets
View Explanation
✓ Correct Answer: Azure Container AppsExplanation:Container Apps provides a serverless experience for containers, handling the operational burden of Kubernetes while offering easy scaling and security features.
251

Which Azure data service allows you to run high-performance, real-time analytics on streaming data from millions of IoT devices using a SQL-like language?

Azure Stream Analytics
Azure Data Factory
Azure Event Hubs
Azure SQL Database
View Explanation
✓ Correct Answer: Azure Stream AnalyticsExplanation:Stream Analytics is a real-time analytics and complex event-processing engine that is designed to analyze and process high volumes of fast-streaming data.
252

Which Azure data service provides a cloud-native data warehouse that can scale compute and storage independently and provides a 'Serverless' SQL pool for ad-hoc data exploration?

Azure Synapse Analytics
Azure SQL Database
Azure Data Factory
Azure Databricks
View Explanation
✓ Correct Answer: Azure Synapse AnalyticsExplanation:Synapse Analytics is an integrated analytics service that provides the benefits of data warehousing and big data analytics in a single platform.
253

Your organization wants to ensure that every new subscription created within the company automatically inherits a set of 50 different security and compliance policies. What is the most efficient way to group these policies and apply them at the Management Group level?

Create an Azure Policy Initiative (Policy Set)
Assign each policy individually
Use an ARM template for every subscription
Azure Blueprints (deprecated in favor of Templates/Bicep Stack)
View Explanation
✓ Correct Answer: Create an Azure Policy Initiative (Policy Set)Explanation:An initiative is a collection of policy definitions that are tailored towards achieving a single overarching goal, simplifying assignment and management.
254

An enterprise wants to run their SQL Server workloads on-premises but still wants the benefits of Azure managed database features like automated backups and the Azure control plane. Which Azure Arc-enabled service provides this functionality?

Azure Arc-enabled data services (SQL Managed Instance)
Azure Arc-enabled servers
Azure SQL Edge
Azure Stack HCI
View Explanation
✓ Correct Answer: Azure Arc-enabled data services (SQL Managed Instance)Explanation:Arc-enabled data services allow you to run Azure data services on-premises, at the edge, and in multi-cloud environments using Kubernetes and the infrastructure of your choice.
255

To ensure that a mission-critical application can survive the failure of an entire Azure region, you want to implement a disaster recovery solution that provides an RTO of less than 4 hours and an RPO of less than 15 minutes for your virtual machines. Which service should you use?

Azure Site Recovery (ASR)
Azure Backup
Availability Zones
Storage Replication (GRS)
View Explanation
✓ Correct Answer: Azure Site Recovery (ASR)Explanation:ASR provides continuous data replication for VMs and can orchestrate failover to a secondary region with very low RPO and RTO.
256

Which Azure service provides a centralized hub for managing and automating cloud security audits and compliance checks using 'Conformance Packs' and the 'Regulatory Compliance' dashboard?

Microsoft Defender for Cloud
Azure Policy
Microsoft Purview
Azure Monitor
View Explanation
✓ Correct Answer: Microsoft Defender for CloudExplanation:Defender for Cloud contains a dedicated compliance dashboard that maps Azure policies to specific regulatory standards like ISO 27001 or PCI DSS.
257

Scenario: To lower the cost of a data processing workload that runs for 4 hours every night, you want to use virtual machines that provide a fixed discount in exchange for a commitment. You expect the VM series (e.g., from D-series to E-series) to change. Solution ?

Azure Savings Plans for Compute
Azure Reservations
Spot VMs
Pay-As-You-Go
View Explanation
✓ Correct Answer: Azure Savings Plans for ComputeExplanation:Savings Plans provide a flexible way to save up to 65% across different VM families and regions with a 1 or 3-year commitment.
258

Which Azure feature allow you to run your 'Azure Functions' on your on-premises servers or in other clouds by installing the Azure Functions runtime on a Kubernetes cluster?

Azure Arc-enabled App Services and Functions
Azure Stack Hub
Durable Functions
Azure Batch
View Explanation
✓ Correct Answer: Azure Arc-enabled App Services and FunctionsExplanation:Azure Arc enables you to run Azure application services anywhere on Kubernetes, providing a consistent serverless experience across environments.
259

Which Azure service provides a managed way to run 'Azure Kubernetes Service' (AKS) on your on-premises hardware, effectively extending the Azure cloud to your data center for latency-sensitive workloads?

Azure Stack HCI (with AKS on HCI)
Azure Arc-enabled Kubernetes
Azure VMware Solution
Azure Batch
View Explanation
✓ Correct Answer: Azure Stack HCI (with AKS on HCI)Explanation:AKS on Azure Stack HCI allows you to deploy and manage containerized applications in your own data center, providing a consistent Kubernetes experience.
260

You are hosting a large dataset in Azure Synapse Analytics and notice that your queries are scanning a massive amount of data, leading to high 'Serverless' costs. Which optimization strategy provides the most immediate relief for common 'WHERE' clause filters?

Implement 'Partitioning' in your Parquet files stored in S3/Data Lake Gen2
Use more compute
Switch to CSV format
Delete old data
View Explanation
✓ Correct Answer: Implement 'Partitioning' in your Parquet files stored in S3/Data Lake Gen2Explanation:Synapse Serverless SQL used a 'distributed storage' model. Partitioning the data in the underlying data lake allows Synapse to skip entire folders that don't match the query filter.
261

Scenario: To minimize the risk of a ransomware attack, you want to ensure that all your Azure Backups are stored in 'Immutable' storage where they cannot be deleted or modified for 7 years. Solution ?

Azure Backup with 'Immutable Vault' enabled
Soft Delete only
LRS storage account
Resource Locks
View Explanation
✓ Correct Answer: Azure Backup with 'Immutable Vault' enabledExplanation:The Immutable Vault feature prevents anyone (including administrators with full RBAC permissions) from performing destructive operations on the backup data.
262

An organization wants to run their massive Big Data analytics workload using Azure Databricks. They want to ensure that their data is stored in the 'Delta Lake' format to provide ACID transactions and scalable metadata handling. Where is this data physically stored?

Azure Data Lake Storage Gen2 (as Parquet files)
Azure SQL Database
Internal Databricks storage
Azure Cosmos DB
View Explanation
✓ Correct Answer: Azure Data Lake Storage Gen2 (as Parquet files)Explanation:Delta Lake is an open-source storage layer that brings reliability to data lakes, and in Azure, it is typically built on top of ADLS Gen2.
263

Your application requires a low-latency, scalable file system that can be mounted simultaneously on Windows, Linux, and macOS clients over the internet without using a VPN. Which Azure service fits best?

Azure Files (Premium tier with SMB 3.1.1 and QUIC enabled)
Azure NetApp Files
Azure Blob Storage (NFS)
Azure Disk Storage
View Explanation
✓ Correct Answer: Azure Files (Premium tier with SMB 3.1.1 and QUIC enabled)Explanation:Azure Files with SMB over QUIC allows users to access file shares over the internet securely and at high performance without needing a VPN tunnel.
264

An organization following the 'Well-Architected' framework wants to analyze their sustainability impact and carbon footprint of their Azure resources over time. Which tool provides this visibility?

Microsoft Emissions Impact Dashboard for Azure
Azure Cost Management
Azure Advisor
Azure Monitor
View Explanation
✓ Correct Answer: Microsoft Emissions Impact Dashboard for AzureExplanation:The Emissions Impact Dashboard provides transparency into the greenhouse gas emissions associated with your usage of Microsoft cloud services.
265

Which Azure service allows you to build a 'Serverless' application that uses a visual designer to automate business processes and connect to over 400 different 3rd-party connectors (like Salesforce, Office 365, or Twitter)?

Azure Logic Apps
Azure Functions
Azure Event Grid
Azure Batch
View Explanation
✓ Correct Answer: Azure Logic AppsExplanation:Logic Apps is specialized for low-code integration and orchestration of workflows and business processes.
266

An organization wants to run their Docker-based application on a serverless platform that supports 'Scale to Zero' and automatically handles TLS certificates and custom domains. Which service fits?

Azure Container Apps
Azure Kubernetes Service (AKS)
Azure Container Instances
Web App for Containers
View Explanation
✓ Correct Answer: Azure Container AppsExplanation:Container Apps is built on KEDA for auto-scaling and Envoy for ingress, providing a powerful serverless container experience.
267

Scenario: To minimize the blast radius of a potential insider threat, you want to ensure that no single IAM administrator can change the billing information or delete the primary subscription. Solution ?

Implement 'Multi-Party Approval' for critical Azure RBAC changes using Microsoft Entra PIM
Use a shared administrative account
Use a single owner for every subscription
Disable the Azure portal
View Explanation
✓ Correct Answer: Implement 'Multi-Party Approval' for critical Azure RBAC changes using Microsoft Entra PIMExplanation:PIM allows you to require approval for role activation, ensuring that sensitive permissions are only granted when necessary and after verification.
268

Your organization is running a massive analytics platform on Azure and wants to ensure that they are not over-paying for capacity. They want a solution that uses AI to analyze their VM and SQL usage over the last 30 days and provide specific 'Downsizing' or 'Reservation' recommendations. Which tool provides this?

Azure Advisor (Cost recommendations)
Azure Cost Management (Cost analysis only)
Azure Policy
Azure Monitor
View Explanation
✓ Correct Answer: Azure Advisor (Cost recommendations)Explanation:Azure Advisor provides personalized and actionable recommendations for cost optimization based on actual usage telemetry.
269

You are migrating a critical legacy application that requires 'Layer 2' networking features (like broadcast/multicast) which are not natively supported in standard Azure VNets. Which Azure product allows you to run these specialized workloads on Azure?

Azure VMware Solution (AVS)
Azure Virtual WAN
Standard Azure VMs
Azure Bastion
View Explanation
✓ Correct Answer: Azure VMware Solution (AVS)Explanation:AVS provides a native VMware environment where you can use NSX-T to provide L2 networking features that standard Azure networking does not support.
270

Scenario: To lower the RTO of your disaster recovery plan for a mission-critical web application, you want a 'Warm Standby' environment in a secondary region where a small instance of your database and web servers are always running and in-sync. Solution ?

Using ASR with a pre-configured recovery plan and secondary databases running at a lower tier
S3 cross-region replication only
Weekly manual database exports
Using one large reserved instance
View Explanation
✓ Correct Answer: Using ASR with a pre-configured recovery plan and secondary databases running at a lower tierExplanation:Warm Standby ensures that the core components are ready to scale out quickly during a disaster, significantly reducing recovery time.
271

Your organization wants to transition their massive Oracle database to Azure. They require a high-performance environment that fully supports Oracle's RAC (Real Application Clusters) and is co-located with Azure regions for low latency. Which service should they choose?

Oracle Database@Azure (co-located OCI infrastructure)
Oracle on Azure VMs
Azure SQL Database
Azure Databricks
View Explanation
✓ Correct Answer: Oracle Database@Azure (co-located OCI infrastructure)Explanation:Microsoft and Oracle partnered to provide Oracle Cloud Infrastructure (OCI) services within Azure data centers, enabling full Oracle features with Azure-native integration.
272

An organization wants to run a serverless data processing pipeline that process images. Every time an image is uploaded to Blob storage, they want to resize it, check for NSFW content using AI, and then store the metadata in Cosmos DB. Which service should coordinate these independent steps?

Azure Durable Functions
Azure Data Factory
Azure Logic Apps
Azure Event Grid
View Explanation
✓ Correct Answer: Azure Durable FunctionsExplanation:Durable Functions is designed for precisely this kind of complex, stateful orchestration of serverless tasks.
273

To reduce the cost of a developer environment that is only used during business hours, which Azure service can you use to automatically start and stop your VMs on a schedule?

Azure Logic Apps with a recurrence trigger calling the Azure VM API
Azure Policy
VNet Peering
Azure Advisor
View Explanation
✓ Correct Answer: Azure Logic Apps with a recurrence trigger calling the Azure VM APIExplanation:Logic Apps or Azure Automation are the most common ways to automate start/stop schedules for cost savings.
274

Which Azure AI service allows you to automatically extract complex data (like line items in an invoice) from millions of documents with high accuracy and low latency?

Azure AI Document Intelligence (formerly Form Recognizer)
Azure AI Vision
Azure AI Search
Azure Functions
View Explanation
✓ Correct Answer: Azure AI Document Intelligence (formerly Form Recognizer)Explanation:Document Intelligence is a specialized AI service that recognizes and extracts text, tables, and structures from documents.
275

An enterprise wants to ensure that all their Azure resources comply with the 'ISO 27001' security standard. Which tool can automatically assess their environment and provide a detailed compliance report?

Microsoft Defender for Cloud (Regulatory compliance dashboard)
Azure Advisor
Azure Policy
Microsoft Purview
View Explanation
✓ Correct Answer: Microsoft Defender for Cloud (Regulatory compliance dashboard)Explanation:Defender for Cloud's regulatory compliance dashboard provides insights into your compliance status for various industry standards.
276

You are hosting a very large dataset in Azure Synapse Analytics and notice that your queries are scanning a massive amount of data, leading to high 'Serverless' costs. Which optimization strategy provides the most immediate relief for common 'WHERE' clause filters?

Implement 'Partitioning' in your Parquet files stored in S3/Data Lake Gen2
Use more compute
Switch to CSV format
Delete old data
View Explanation
✓ Correct Answer: Implement 'Partitioning' in your Parquet files stored in S3/Data Lake Gen2Explanation:Partitioning the underlying data allows Synapse Serverless to skip scanned data that doesn't match the query filters, drastically reducing costs.
277

An organization wants to run a serverless workflow that process images. Every time an image is uploaded to Blob storage, they want to resize it, check for NSFW content using AI, and then store the metadata in Cosmos DB. Which service should coordinate these independent steps?

Azure Durable Functions
Azure Data Factory
Azure Logic Apps
Azure Event Grid
View Explanation
✓ Correct Answer: Azure Durable FunctionsExplanation:Durable Functions is ideal for complex serverless orchestrations where you need to manage state and complex logic.
278

To reduce the cost of a developer sandbox environment that is only used during business hours, which Azure service can you use to automatically start and stop your instances on a schedule?

Azure Automation (Runbooks)
Azure Policy
Azure Monitor
Azure Advisor
View Explanation
✓ Correct Answer: Azure Automation (Runbooks)Explanation:Azure Automation provides a native and scriptable way to manage schedules for virtual machines, resulting in significant cost savings.
279

Which Azure machine learning service allows developers to automatically extract text, forms, and data from millions of scanned documents (like invoices or medical records) with high accuracy?

Azure AI Document Intelligence
Azure AI Vision
Azure AI Search
Azure Functions
View Explanation
✓ Correct Answer: Azure AI Document IntelligenceExplanation:Document Intelligence is specifically designed for analyzing documents and extracting structured data.
280

An enterprise wants to be alerted immediately if their Azure monthly spend is projected to exceed their budget by more than 10%. Which Azure service provides this 'Forecast-based' alerting?

Azure Budgets (Cost Management)
Azure Advisor
Azure Monitor
Log Analytics
View Explanation
✓ Correct Answer: Azure Budgets (Cost Management)Explanation:Azure Budgets can trigger alerts based on both actual spending and 'forecasted' spending, allowing for proactive cost management.
281

An organization is migrating their monolith to Azure and wants to use a managed tool that can containerize their Java application without and deploy it to AKS or App Service with minimal manual configuration. Which tool should they use?

Azure App Service Migration Assistant or App Containerization tool
Azure Migrate only
Azure PowerShell
Bicep
View Explanation
✓ Correct Answer: Azure App Service Migration Assistant or App Containerization toolExplanation:The Azure App Containerization tool helps you modernize existing web applications by containerizing them with minimal changes.
282

You are building a real-time multiplayer game and need an in-memory data store that can handle millions of concurrent connections with sub-millisecond latency. You also require data persistence and geo-replication. Which service is best?

Azure Cache for Redis (Enterprise tier with Active Geo-Replication)
Azure Cosmos DB
Azure SQL Database
Azure Table Storage
View Explanation
✓ Correct Answer: Azure Cache for Redis (Enterprise tier with Active Geo-Replication)Explanation:The Enterprise tier of Redis provides the required performance, high availability, and the ability to replicate data across regions in an active-active setup.
283

An organization wants to analyze why their Azure Synapse serverless SQL queries are running slowly and costing more than expected. They want to see the 'Data Processed' for each query. Where can they find this data?

Synapse Studio 'Monitor' hub
Azure Cost Management
Metrics Explorer
Log Analytics
View Explanation
✓ Correct Answer: Synapse Studio 'Monitor' hubExplanation:The Monitor hub in Synapse Studio provides detailed execution stats, including the amount of data processed per query, which is the primary billing metric for serverless SQL.
284

Scenario: You want to ensure that if a developer launches a virtual machine without a 'CostCenter' tag, the VM is automatically shut down and an alert is sent. Solution ?

Azure Policy with a 'Modify' or 'Deny' effect, or a Logic App triggered by Activity Log
Azure Advisor
RBAC permissions
NSG rules
View Explanation
✓ Correct Answer: Azure Policy with a 'Modify' or 'Deny' effect, or a Logic App triggered by Activity LogExplanation:While 'Deny' prevents creation, a combination of Activity Log alerts and Logic Apps can perform remediation actions like shutting down the non-compliant resource.
285

An organization wants to run their massive Big Data workloads using Azure HDInsight. They want to ensure they don't over-pay for capacity during periods of low activity. Which HDInsight feature automatically adjusts the number of nodes in the cluster?

HDInsight Autoscale
Azure VM Scale Sets
Standard VM Auto-scaling
Reserved Instances
View Explanation
✓ Correct Answer: HDInsight AutoscaleExplanation:Autoscale in HDInsight allows you to define rules to scale nodes based on the time of day or the number of pending tasks.
286

You are hosting a globally distributed application that requires a single static entry point to route users to the closest healthy region. The application uses non-HTTP TCP traffic for high-performance data transfer. Solution ?

Azure Front Door (Standard/Premium)
Azure Traffic Manager
Load Balancer
ExpressRoute
View Explanation
✓ Correct Answer: Azure Front Door (Standard/Premium)Explanation:Front Door uses BGP anycast and the Microsoft global network to route any TCP traffic (not just HTTP) to the best endpoint.
287

An organization wants to move their legacy .NET applications to Azure. They want a solution that supports Windows containers and allows them to scale based on CPU usage. Which platform should they choose if they want a serverless experience with minimal operational overhad?

Azure Container Apps
Azure Kubernetes Service (AKS)
Azure Functions
Azure VM Scale Sets
View Explanation
✓ Correct Answer: Azure Container AppsExplanation:Container Apps on Azure provides an easy-to-use serverless container platform that handles scaling and infrastructure management.
288

Which Azure service provides a managed way to run 'Service Quota' analysis across multiple subscriptions and automatically request increases before you hit the limit?

Quota (in Azure portal)
Azure Advisor
Azure Price Calculator
Azure Policy
View Explanation
✓ Correct Answer: Quota (in Azure portal)Explanation:The 'Quotas' experience in the Azure portal allows you to view and manage limits centrally for your subscription.
289

Scenario: To minimize the latency for users worldwide, you decide to use a database that provides 'Single-digit millisecond' performance for both reads and writes with global replication. Solution ?

Azure Cosmos DB
Azure SQL Database
Azure Database for PostgreSQL
Azure Table Storage
View Explanation
✓ Correct Answer: Azure Cosmos DBExplanation:Cosmos DB is designed for high-performance and global scale with guaranteed low latency.
290

Which Azure AI service allows developers to build search applications for their internal corporate documents (PDFs, Wikis, Sharepoint) using natural language queries and vector search?

Azure AI Search (formerly Azure Cognitive Search)
Azure AI Vision
Azure AI Language
Azure OpenAI Service
View Explanation
✓ Correct Answer: Azure AI Search (formerly Azure Cognitive Search)Explanation:Azure AI Search provides full-text, vector, and hybrid search capabilities for information retrieval.
291

Which Azure service provides a way to 'Replay' archived events from your Event Grid to test how a new application would have behaved using real past data?

Event Grid Event Replay
Activity Log
Log Analytics
Azure Monitor
View Explanation
✓ Correct Answer: Event Grid Event ReplayExplanation:Event Grid supports event delivery and can store events for a period, though full historical 'replay' often requires integration with Event Hubs or custom logic.
292

Which Azure security service allows you to centrally manage and automate security configuration checks for your enterprise using a set of best-practice 'Conformance Packs' and policies?

Azure Policy
Microsoft Defender for Cloud
Azure Sentinel
Log Analytics
View Explanation
✓ Correct Answer: Azure PolicyExplanation:Azure Policy initiatives and Defender for Cloud dashboards provide the necessary governance and auditing for security best practices.
293

You are building a real-time collaborative workspace. You need a way to push updates to millions of web and mobile clients instantly whenever a change occurs in your database. Which Azure service provides managed WebSocket support at global scale for this purpose?

Azure Web PubSub or Azure SignalR Service
Azure Front Door
Azure App Service
Azure API Management
View Explanation
✓ Correct Answer: Azure Web PubSub or Azure SignalR ServiceExplanation:Web PubSub and SignalR are specialized for real-time messaging and WebSocket management at high scale.
294

To protect against an entire regional outage, an architect decides to maintain a 'Multi-Region Active-Active' architecture for their web application. Which service is essential for globally distributing and load-balancing traffic across regions?

Azure Front Door or Azure Traffic Manager
Azure Application Gateway
VNet Peering
ExpressRoute
View Explanation
✓ Correct Answer: Azure Front Door or Azure Traffic ManagerExplanation:These global services handle routing and failover across multiple regions to ensure high availability.
295

Scenario: To minimize the latency of a critical database for users globally, you want to use a NoSQL database that automatically replicates data across multiple regions with a 'Multi-Region Write' capability. Solution ?

Azure Cosmos DB (with Multi-region writes enabled)
Azure SQL Database
Azure Database for MySQL (Flexible Server)
Azure Blob Storage
View Explanation
✓ Correct Answer: Azure Cosmos DB (with Multi-region writes enabled)Explanation:Cosmos DB is designed for global scale, offering multi-master replication for low-latency writes worldwide.
296

An enterprise wants to run a massive batch processing workload that requires thousands of CPU cores for a few hours. They want to minimize cost by using the lowest possible VM pricing and are comfortable with the instances being reclaimed. Which service should they use?

Azure Batch with Spot Virtual Machines
Azure Kubernetes Service (AKS)
Azure Functions (Consumption)
Azure VM Scale Sets
View Explanation
✓ Correct Answer: Azure Batch with Spot Virtual MachinesExplanation:Azure Batch is designed specifically for large-scale parallel and high-performance computing (HPC) batch jobs, and Spot VMs provide the lowest cost for interruptible workloads.
297

Which Azure service provides a unified data governance solution that helps you create a 'Data Map' and track 'Data Lineage' across your entire data estate, including on-premises and multi-cloud sources?

Microsoft Purview
Microsoft Defender for Cloud
Azure Data Factory
Azure Synapse Analytics
View Explanation
✓ Correct Answer: Microsoft PurviewExplanation:Purview is a comprehensive service for discovering, managing, and governing data regardless of its location.
298

An organization is migrating their massive Oracle database to Azure. They require a high-performance environment that fully supports Oracle's RAC (Real Application Clusters) and is co-located with Azure regions for low latency. Which service should they choose?

Oracle Database@Azure
Oracle on Azure VMs
Azure SQL Managed Instance
Azure Databricks
View Explanation
✓ Correct Answer: Oracle Database@AzureExplanation:Oracle Database@Azure brings Oracle Cloud Infrastructure (OCI) database services directly into Azure data centers for seamless integration and performance.
299

You are hosting a very large dataset in Azure Blob storage and want to provide a way for your business analysts to query this data using SQL without needing to manage a database cluster or move the data into a data warehouse. Which service fits?

Azure Synapse Analytics (Serverless SQL pool)
Azure SQL Database
Azure Data Factory
Azure Data Explorer
View Explanation
✓ Correct Answer: Azure Synapse Analytics (Serverless SQL pool)Explanation:Synapse Serverless SQL allows you to query Parquet, CSV, and JSON files directly in the data lake using standard T-SQL.
300

Which Azure service provides a 'No-Code' experience for building, training, and deploying machine learning models using a drag-and-drop designer?

Azure Machine Learning Designer
Azure Machine Learning Studio (Classic)
Azure Cognitive Services
Azure Functions
View Explanation
✓ Correct Answer: Azure Machine Learning DesignerExplanation:The Designer in Azure ML provides a visual interface for complex data science workflows.
301

An organization wants to analyze the cost and usage of their Azure environment for the last 12 months with the ability to forecast future spending. Which tool should they use?

Azure Cost Management (Cost analysis)
Azure Advisor
Azure Policy
Log Analytics
View Explanation
✓ Correct Answer: Azure Cost Management (Cost analysis)Explanation:Cost Management provides historical data, visualization, and ML-based forecasting for future cloud spending.
302

An organization building a data lake wants to store their data in the 'Delta Lake' format to provide ACID transactions. Where is this data physically stored in Azure?

Azure Data Lake Storage Gen2 (as Parquet files)
Azure SQL Database
Internal Databricks storage
Azure Cosmos DB
View Explanation
✓ Correct Answer: Azure Data Lake Storage Gen2 (as Parquet files)Explanation:Delta Lake is an open-source storage layer that brings reliability to data lakes, typically built on top of ADLS Gen2 in Azure.
303

An organization wants to run their massive Big Data analytics workload using Azure Synapse Analytics. They want to ensure that they are not over-paying for capacity during periods of low activity. Which Synapse feature automatically adjusts the number of Data Warehouse Units (DWUs)?

Synapse Autoscale (for Spark pools) or manual pausing for Dedicated pools
Azure VM Scale Sets
Standard VM Auto-scaling
Reserved Instances
View Explanation
✓ Correct Answer: Synapse Autoscale (for Spark pools) or manual pausing for Dedicated poolsExplanation:Spark pools support autoscale, while Dedicated SQL pools are typically paused manually or via automation to save costs when not in use.
304

You are hosting a globally distributed application that requires a single static entry point to route users to the closest healthy region. The application uses HTTP/HTTPS traffic and requires SSL termination and WAF protection. Solution ?

Azure Front Door
Azure Traffic Manager
Azure Application Gateway
VNet Peering
View Explanation
✓ Correct Answer: Azure Front DoorExplanation:Front Door is the standard global service for secure, high-performance web traffic routing.
305

To reduce the cost of an Azure environment that is only used during business hours, which Azure service can you use to automatically start and stop your instances on a schedule?

Azure Automation (Runbooks)
Azure Policy
Azure Monitor
Azure Advisor
View Explanation
✓ Correct Answer: Azure Automation (Runbooks)Explanation:Automation Runbooks are the standard way to automate operational tasks like scheduling resource availability.
306

An enterprise wants to ensure that all their Azure Activity logs are protected from being tampered with or deleted, even if their subscription administrative accounts are compromised. Which feature provides the strongest protection for log integrity?

Export to a Storage Account with 'Immutable Storage' (Lock) and Log Analytics with 'Data Export'
Azure RBAC roles
Standard Blob versioning
Azure Config (N/A to Azure logs)
View Explanation
✓ Correct Answer: Export to a Storage Account with 'Immutable Storage' (Lock) and Log Analytics with 'Data Export'Explanation:Immutable storage in Azure prevents anyone from deleting the logs, and exporting to a separate, hardened subscription adds an extra layer of security.
307

An organization wants to analyze the cost and usage of their Azure environment for the last 12 months with the ability to forecast future spending for the next 12 months. Which tool should they use?

Azure Cost Management + Billing
Azure Budgets
Azure Advisor
Azure Monitor
View Explanation
✓ Correct Answer: Azure Cost Management + BillingExplanation:Cost Management provides historical data, visualization, and ML-based forecasting for future cloud spending.
308

An organization is migrating their legacy on-premises Windows workload to Azure and needs a managed file storage service that supports the NTFS protocol and integrates with their Azure Managed Microsoft AD. Which service should they choose?

Azure Files (Premium tier with AD DS integration)
Azure Blob Storage
Azure NetApp Files
Azure Managed Disks
View Explanation
✓ Correct Answer: Azure Files (Premium tier with AD DS integration)Explanation:Azure Files provides managed SMB shares that natively support NTFS ACLs and Entra/AD DS authentication.
309

An organization wants to run their massive Big Data analytics workload using Azure Synapse Analytics and wants a solution that provides low latency and high availability across three availability zones. Which tier should they choose?

Dedicated SQL pool with Zone Redundancy enabled
Serverless SQL pool
Standard Synapse Workspace
Azure SQL Database
View Explanation
✓ Correct Answer: Dedicated SQL pool with Zone Redundancy enabledExplanation:Zone redundancy for Synapse SQL pools ensures that the database remains available even if an entire availability zone fails.
310

Scenario: To minimize the risk of a single point of failure in your global application, you want to route users to the healthiest and closest region using Anycast technology. Solution ?

Azure Front Door
Azure Traffic Manager
Standard Load Balancer
VNet Peering
View Explanation
✓ Correct Answer: Azure Front DoorExplanation:Azure Front Door uses Anycast to route requests to the nearest edge location, providing a fast and highly available entrance to your application.
311

Which Azure AI service allows you to automatically identify and redact sensitive information (PII) from text data without buildling custom models?

Azure AI Language (formerly Cognitive Service for Language)
Azure Machine Learning
Azure AI Search
Azure Functions
View Explanation
✓ Correct Answer: Azure AI Language (formerly Cognitive Service for Language)Explanation:Azure AI Language has built-in features for PII identification and redaction.
312

Scenario: To minimize the latency for users worldwide, you decide to use a database that provides 'Single-digit millisecond' performance for both reads and writes with global replication. Solution ?

Azure Cosmos DB
Azure SQL Database
Azure Database for PostgreSQL
Azure Table Storage
View Explanation
✓ Correct Answer: Azure Cosmos DBExplanation:Cosmos DB is designed for massive scale and guaranteed low latency worldwide.
313

Which Azure service allows you to centrally manage and enforce security best practices across all your Azure accounts by providing a set of 'Service Control Policies' (SCPs) or initiatives?

Azure Policy (at the Management Group level)
Azure Advisor
Microsoft Defender for Cloud
Log Analytics
View Explanation
✓ Correct Answer: Azure Policy (at the Management Group level)Explanation:Azure Policy is the foundation for governance and compliance at scale across the organization hierarchy.
314

Your High Performance Computing (HPC) workload requires low network latency between Azure Virtual Machines instances. What feature should you use?

Cluster Placement or Proximity Placement Groups
Spread Placement Groups
Azure Load Balancer
Azure Virtual Network peering
View Explanation
✓ Correct Answer: Cluster Placement or Proximity Placement GroupsExplanation:Placement groups pack instances close together in a single availability zone or data center for low-latency, high-throughput networking.
315

You are hosting a large data analytics workload on Azure HDInsight. To ensure that you are not over-paying for capacity, you want to use a feature that automatically scales the cluster up and down based on the actual CPU and memory demand. Which feature should you enable?

HDInsight Autoscale
Azure VM Scale Sets
Reserved Instances
Standard VM Auto-scaling
View Explanation
✓ Correct Answer: HDInsight AutoscaleExplanation:HDInsight Autoscale allows you to optimize cluster performance and cost by automatically adjusting the number of worker nodes.
316

An enterprise wants to ensure that all their storage accounts are private and cannot be made public by any user. Which organization-wide switch or policy should they enable?

Azure Policy that denys 'Allow Blob public access' property on Storage Accounts
RBAC roles only
VNet Private Link only
Azure Firewall
View Explanation
✓ Correct Answer: Azure Policy that denys 'Allow Blob public access' property on Storage AccountsExplanation:Azure Policy is the most effective way to prevent non-compliant public exposure across the entire organization.
317

You are designing a serverless microservices architecture for a new startup. The application needs to handle unpredictable traffic spikes without managing any underlying infrastructure. Which compute service should you use?

Azure Functions
Azure Kubernetes Service (AKS)
Azure Virtual Machines
Azure SQL Database
View Explanation
✓ Correct Answer: Azure FunctionsExplanation:Azure Functions is a serverless compute service that automatically scales with demand, making it ideal for unpredictable traffic without infrastructure management.
318

A financial application requires a relational database that supports high availability and automated backups. The database must be fully managed to reduce operational overhead. Which service fits these requirements?

Azure Virtual Machines
Azure SQL Database
Azure Cosmos DB
Azure Blob Storage
View Explanation
✓ Correct Answer: Azure SQL DatabaseExplanation:Azure SQL Database is a fully managed relational database service that supports high availability and automated backups out of the box.
319

You need to host a static website (HTML, CSS, JS) with the lowest possible cost and high durability. You do not need server-side processing. Which storage solution should you choose?

Azure Blob Storage configured for static website hosting
Azure Virtual Machines running a web server
Azure SQL Database
Azure Managed Disks
View Explanation
✓ Correct Answer: Azure Blob Storage configured for static website hostingExplanation:Azure Blob Storage supports static website hosting directly, offering high durability and low cost compared to running a VM.
320

Your media company streams video content to users globally. Users in different regions are experiencing high latency. You need to improve performance by caching content closer to the users. Which service should you implement?

Azure CDN
Azure DNS
Azure Load Balancer
Azure Virtual Network
View Explanation
✓ Correct Answer: Azure CDNExplanation:Azure CDN caches content at edge locations around the world, significantly reducing latency for global users.
321

Your public-facing web application is under a Distributed Denial of Service (DDoS) attack. You need a managed service to detect and mitigate these attacks automatically. What should you enable?

Azure DDoS Protection
Azure Active Directory (Entra ID)
Azure Key Vault
Azure Virtual Network
View Explanation
✓ Correct Answer: Azure DDoS ProtectionExplanation:Azure DDoS Protection provides always-on detection and automatic inline mitigations to minimize application downtime and latency during a DDoS attack.
322

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Azure Key Vault
Azure Web Application Firewall
Azure Active Directory (Entra ID)
Azure Blob Storage
View Explanation
✓ Correct Answer: Azure Key VaultExplanation:Azure Key Vault is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
323

You are analyzing petabytes of data for business intelligence reports. You need a fully managed, serverless enterprise data warehouse that supports SQL queries. Which service is best suited for this task?

Azure Synapse Analytics
Azure SQL Database
Azure Files
Azure Cosmos DB
View Explanation
✓ Correct Answer: Azure Synapse AnalyticsExplanation:Azure Synapse Analytics is designed for large-scale data warehousing and analytics, allowing you to run SQL queries on petabytes of data.
324

Your application generates millions of clickstream events per second. You need a service to ingest and buffer this data in real-time before processing it. Which service fits this need?

Azure Cosmos DB (or Stream service)
Azure Archive Storage
Azure SQL Database
Azure Functions
View Explanation
✓ Correct Answer: Azure Cosmos DB (or Stream service)Explanation:High-throughput ingestion is a core use case for scalable services like Azure Cosmos DB or dedicated streaming services.
325

Your team wants to automate the provisioning of infrastructure to ensure consistency across environments. You need to define your infrastructure as code (IaC) using declarative templates. Which service should you use?

Azure Resource Manager (ARM)
Azure Pipelines
Azure Virtual Machines
Azure Repos
View Explanation
✓ Correct Answer: Azure Resource Manager (ARM)Explanation:Azure Resource Manager (ARM) allows you to model and provision all your cloud infrastructure resources through code templates.
326

You are designing a CI/CD pipeline. You need a service to compile source code, run tests, and produce software packages that are ready to deploy. Which service handles the build phase?

Azure Functions
Azure Resource Manager (ARM)
Azure Repos
Azure Pipelines
View Explanation
✓ Correct Answer: Azure PipelinesExplanation:Azure Pipelines is a fully managed build service that compiles source code, runs tests, and produces software packages.
327

A law firm wants to digitize millions of scanned contracts. You need an AI service to extract text, forms, and tables from these PDF documents automatically. Which service is designed for this?

Azure Form Recognizer
Azure Speech Services
Azure Bot Service
Azure Computer Vision
View Explanation
✓ Correct Answer: Azure Form RecognizerExplanation:Azure Form Recognizer uses machine learning to extract text, handwriting, and data from scanned documents.
328

You are building a customer support chatbot that needs to understand natural language intent (e.g., 'book a flight'). Which service provides Natural Language Understanding (NLU) capabilities?

Azure Form Recognizer
Azure Computer Vision
Azure Bot Service
Azure Machine Learning
View Explanation
✓ Correct Answer: Azure Bot ServiceExplanation:Azure Bot Service provides conversational AI capabilities to build interfaces like chatbots that understand natural language.
329

Your data science team needs a fully managed environment to build, train, and deploy custom machine learning models using TensorFlow. Which platform provides these end-to-end MLOps capabilities?

Azure Speech Services
Azure Machine Learning
Azure Computer Vision
Azure Bot Service
View Explanation
✓ Correct Answer: Azure Machine LearningExplanation:Azure Machine Learning is the comprehensive platform for the entire machine learning lifecycle, from building models to deployment.
330

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Use Azure Virtual Machines instance profiles
Create long-term access keys for each developer
Share full administrative credentials
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
331

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Create duplicate users in both accounts
Share access keys between accounts
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Azure Active Directory (Entra ID) Roles with cross-account access
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
332

Your application requires high CPU performance for compute-intensive workloads like video encoding. Which Azure Virtual Machines instance type is optimized for this?

Memory Optimized instances
General Purpose instances
Azure Functions
Compute Optimized Azure Virtual Machines instances
View Explanation
✓ Correct Answer: Compute Optimized Azure Virtual Machines instancesExplanation:Compute Optimized Azure Virtual Machines instances provide high-performance processors ideal for compute-intensive applications.
333

Your High Performance Computing (HPC) workload requires low network latency between Azure Virtual Machines instances. What feature should you use?

Cluster Placement or Proximity Placement Groups
Azure Load Balancer
Azure Virtual Network peering
Spread Placement Groups
View Explanation
✓ Correct Answer: Cluster Placement or Proximity Placement GroupsExplanation:Placement groups pack instances close together in a single availability zone or data center for low-latency, high-throughput networking.
334

Your application requires persistent block storage that survives Azure Virtual Machines instance termination. Which service should you use?

Azure Managed Disks
Azure Blob Storage
Azure Files
Ephemeral/Instance Store
View Explanation
✓ Correct Answer: Azure Managed DisksExplanation:Azure Managed Disks volumes persist independently from virtual machine instances and can be attached/detached as needed.
335

You need to create a backup of your Azure Managed Disks volume for disaster recovery. What feature should you use?

Azure Managed Disks Snapshots
Azure Blob Storage versioning
Azure Virtual Machines Image/AMI
Azure SQL Database backups
View Explanation
✓ Correct Answer: Azure Managed Disks SnapshotsExplanation:Azure Managed Disks Snapshots are incremental backups typically stored in Azure Blob Storage, providing point-in-time recovery.
336

You need to create a logically isolated section of your cloud environment where you can launch resources in a virtual network that you define. Which service provides this?

Azure Active Directory (Entra ID)
Network Security Groups (NSG)
Azure Virtual Network
Azure Load Balancer
View Explanation
✓ Correct Answer: Azure Virtual NetworkExplanation:Azure Virtual Network enables you to launch cloud resources in a logically isolated virtual network with full control over IP addressing, subnets, and routing.
337

You are designing a serverless microservices architecture for a new startup. The application needs to handle unpredictable traffic spikes without managing any underlying infrastructure. Which compute service should you use?

Azure Functions
Azure Virtual Machines
Azure Kubernetes Service (AKS)
Azure SQL Database
View Explanation
✓ Correct Answer: Azure FunctionsExplanation:Azure Functions is a serverless compute service that automatically scales with demand, making it ideal for unpredictable traffic without infrastructure management.
338

A financial application requires a relational database that supports high availability and automated backups. The database must be fully managed to reduce operational overhead. Which service fits these requirements?

Azure Virtual Machines
Azure Blob Storage
Azure Cosmos DB
Azure SQL Database
View Explanation
✓ Correct Answer: Azure SQL DatabaseExplanation:Azure SQL Database is a fully managed relational database service that supports high availability and automated backups out of the box.
339

You need to host a static website (HTML, CSS, JS) with the lowest possible cost and high durability. You do not need server-side processing. Which storage solution should you choose?

Azure Blob Storage configured for static website hosting
Azure Virtual Machines running a web server
Azure Managed Disks
Azure SQL Database
View Explanation
✓ Correct Answer: Azure Blob Storage configured for static website hostingExplanation:Azure Blob Storage supports static website hosting directly, offering high durability and low cost compared to running a VM.
340

Your media company streams video content to users globally. Users in different regions are experiencing high latency. You need to improve performance by caching content closer to the users. Which service should you implement?

Azure DNS
Azure Virtual Network
Azure Load Balancer
Azure CDN
View Explanation
✓ Correct Answer: Azure CDNExplanation:Azure CDN caches content at edge locations around the world, significantly reducing latency for global users.
341

Your public-facing web application is under a Distributed Denial of Service (DDoS) attack. You need a managed service to detect and mitigate these attacks automatically. What should you enable?

Azure DDoS Protection
Azure Virtual Network
Azure Active Directory (Entra ID)
Azure Key Vault
View Explanation
✓ Correct Answer: Azure DDoS ProtectionExplanation:Azure DDoS Protection provides always-on detection and automatic inline mitigations to minimize application downtime and latency during a DDoS attack.
342

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Azure Web Application Firewall
Azure Active Directory (Entra ID)
Azure Key Vault
Azure Blob Storage
View Explanation
✓ Correct Answer: Azure Key VaultExplanation:Azure Key Vault is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
343

You are analyzing petabytes of data for business intelligence reports. You need a fully managed, serverless enterprise data warehouse that supports SQL queries. Which service is best suited for this task?

Azure Files
Azure Synapse Analytics
Azure SQL Database
Azure Cosmos DB
View Explanation
✓ Correct Answer: Azure Synapse AnalyticsExplanation:Azure Synapse Analytics is designed for large-scale data warehousing and analytics, allowing you to run SQL queries on petabytes of data.
344

Your application generates millions of clickstream events per second. You need a service to ingest and buffer this data in real-time before processing it. Which service fits this need?

Azure Functions
Azure SQL Database
Azure Cosmos DB (or Stream service)
Azure Archive Storage
View Explanation
✓ Correct Answer: Azure Cosmos DB (or Stream service)Explanation:High-throughput ingestion is a core use case for scalable services like Azure Cosmos DB or dedicated streaming services.
345

Your team wants to automate the provisioning of infrastructure to ensure consistency across environments. You need to define your infrastructure as code (IaC) using declarative templates. Which service should you use?

Azure Pipelines
Azure Virtual Machines
Azure Repos
Azure Resource Manager (ARM)
View Explanation
✓ Correct Answer: Azure Resource Manager (ARM)Explanation:Azure Resource Manager (ARM) allows you to model and provision all your cloud infrastructure resources through code templates.
346

You are designing a CI/CD pipeline. You need a service to compile source code, run tests, and produce software packages that are ready to deploy. Which service handles the build phase?

Azure Resource Manager (ARM)
Azure Repos
Azure Pipelines
Azure Functions
View Explanation
✓ Correct Answer: Azure PipelinesExplanation:Azure Pipelines is a fully managed build service that compiles source code, runs tests, and produces software packages.
347

A law firm wants to digitize millions of scanned contracts. You need an AI service to extract text, forms, and tables from these PDF documents automatically. Which service is designed for this?

Azure Computer Vision
Azure Bot Service
Azure Speech Services
Azure Form Recognizer
View Explanation
✓ Correct Answer: Azure Form RecognizerExplanation:Azure Form Recognizer uses machine learning to extract text, handwriting, and data from scanned documents.
348

You are building a customer support chatbot that needs to understand natural language intent (e.g., 'book a flight'). Which service provides Natural Language Understanding (NLU) capabilities?

Azure Bot Service
Azure Computer Vision
Azure Machine Learning
Azure Form Recognizer
View Explanation
✓ Correct Answer: Azure Bot ServiceExplanation:Azure Bot Service provides conversational AI capabilities to build interfaces like chatbots that understand natural language.
349

Your data science team needs a fully managed environment to build, train, and deploy custom machine learning models using TensorFlow. Which platform provides these end-to-end MLOps capabilities?

Azure Machine Learning
Azure Computer Vision
Azure Speech Services
Azure Bot Service
View Explanation
✓ Correct Answer: Azure Machine LearningExplanation:Azure Machine Learning is the comprehensive platform for the entire machine learning lifecycle, from building models to deployment.
350

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
Create long-term access keys for each developer
Use Azure Virtual Machines instance profiles
Share full administrative credentials
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
351

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Roles with cross-account access
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Share access keys between accounts
Create duplicate users in both accounts
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
352

Your application requires high CPU performance for compute-intensive workloads like video encoding. Which Azure Virtual Machines instance type is optimized for this?

Compute Optimized Azure Virtual Machines instances
Memory Optimized instances
General Purpose instances
Azure Functions
View Explanation
✓ Correct Answer: Compute Optimized Azure Virtual Machines instancesExplanation:Compute Optimized Azure Virtual Machines instances provide high-performance processors ideal for compute-intensive applications.
353

Your High Performance Computing (HPC) workload requires low network latency between Azure Virtual Machines instances. What feature should you use?

Azure Virtual Network peering
Azure Load Balancer
Spread Placement Groups
Cluster Placement or Proximity Placement Groups
View Explanation
✓ Correct Answer: Cluster Placement or Proximity Placement GroupsExplanation:Placement groups pack instances close together in a single availability zone or data center for low-latency, high-throughput networking.
354

Your application requires persistent block storage that survives Azure Virtual Machines instance termination. Which service should you use?

Azure Managed Disks
Azure Files
Ephemeral/Instance Store
Azure Blob Storage
View Explanation
✓ Correct Answer: Azure Managed DisksExplanation:Azure Managed Disks volumes persist independently from virtual machine instances and can be attached/detached as needed.
355

You need to create a backup of your Azure Managed Disks volume for disaster recovery. What feature should you use?

Azure Managed Disks Snapshots
Azure Blob Storage versioning
Azure SQL Database backups
Azure Virtual Machines Image/AMI
View Explanation
✓ Correct Answer: Azure Managed Disks SnapshotsExplanation:Azure Managed Disks Snapshots are incremental backups typically stored in Azure Blob Storage, providing point-in-time recovery.
356

You need to create a logically isolated section of your cloud environment where you can launch resources in a virtual network that you define. Which service provides this?

Azure Load Balancer
Azure Virtual Network
Azure Active Directory (Entra ID)
Network Security Groups (NSG)
View Explanation
✓ Correct Answer: Azure Virtual NetworkExplanation:Azure Virtual Network enables you to launch cloud resources in a logically isolated virtual network with full control over IP addressing, subnets, and routing.
357

You are designing a serverless microservices architecture for a new startup. The application needs to handle unpredictable traffic spikes without managing any underlying infrastructure. Which compute service should you use?

Azure SQL Database
Azure Kubernetes Service (AKS)
Azure Virtual Machines
Azure Functions
View Explanation
✓ Correct Answer: Azure FunctionsExplanation:Azure Functions is a serverless compute service that automatically scales with demand, making it ideal for unpredictable traffic without infrastructure management.
358

A financial application requires a relational database that supports high availability and automated backups. The database must be fully managed to reduce operational overhead. Which service fits these requirements?

Azure Cosmos DB
Azure Blob Storage
Azure Virtual Machines
Azure SQL Database
View Explanation
✓ Correct Answer: Azure SQL DatabaseExplanation:Azure SQL Database is a fully managed relational database service that supports high availability and automated backups out of the box.
359

You need to host a static website (HTML, CSS, JS) with the lowest possible cost and high durability. You do not need server-side processing. Which storage solution should you choose?

Azure Blob Storage configured for static website hosting
Azure Virtual Machines running a web server
Azure SQL Database
Azure Managed Disks
View Explanation
✓ Correct Answer: Azure Blob Storage configured for static website hostingExplanation:Azure Blob Storage supports static website hosting directly, offering high durability and low cost compared to running a VM.
360

Your media company streams video content to users globally. Users in different regions are experiencing high latency. You need to improve performance by caching content closer to the users. Which service should you implement?

Azure Load Balancer
Azure CDN
Azure DNS
Azure Virtual Network
View Explanation
✓ Correct Answer: Azure CDNExplanation:Azure CDN caches content at edge locations around the world, significantly reducing latency for global users.
361

Your public-facing web application is under a Distributed Denial of Service (DDoS) attack. You need a managed service to detect and mitigate these attacks automatically. What should you enable?

Azure DDoS Protection
Azure Active Directory (Entra ID)
Azure Key Vault
Azure Virtual Network
View Explanation
✓ Correct Answer: Azure DDoS ProtectionExplanation:Azure DDoS Protection provides always-on detection and automatic inline mitigations to minimize application downtime and latency during a DDoS attack.
362

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Azure Blob Storage
Azure Active Directory (Entra ID)
Azure Web Application Firewall
Azure Key Vault
View Explanation
✓ Correct Answer: Azure Key VaultExplanation:Azure Key Vault is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
363

You are analyzing petabytes of data for business intelligence reports. You need a fully managed, serverless enterprise data warehouse that supports SQL queries. Which service is best suited for this task?

Azure Synapse Analytics
Azure SQL Database
Azure Files
Azure Cosmos DB
View Explanation
✓ Correct Answer: Azure Synapse AnalyticsExplanation:Azure Synapse Analytics is designed for large-scale data warehousing and analytics, allowing you to run SQL queries on petabytes of data.
364

Your application generates millions of clickstream events per second. You need a service to ingest and buffer this data in real-time before processing it. Which service fits this need?

Azure SQL Database
Azure Cosmos DB (or Stream service)
Azure Archive Storage
Azure Functions
View Explanation
✓ Correct Answer: Azure Cosmos DB (or Stream service)Explanation:High-throughput ingestion is a core use case for scalable services like Azure Cosmos DB or dedicated streaming services.
365

Your team wants to automate the provisioning of infrastructure to ensure consistency across environments. You need to define your infrastructure as code (IaC) using declarative templates. Which service should you use?

Azure Resource Manager (ARM)
Azure Pipelines
Azure Repos
Azure Virtual Machines
View Explanation
✓ Correct Answer: Azure Resource Manager (ARM)Explanation:Azure Resource Manager (ARM) allows you to model and provision all your cloud infrastructure resources through code templates.
366

You are designing a CI/CD pipeline. You need a service to compile source code, run tests, and produce software packages that are ready to deploy. Which service handles the build phase?

Azure Pipelines
Azure Resource Manager (ARM)
Azure Repos
Azure Functions
View Explanation
✓ Correct Answer: Azure PipelinesExplanation:Azure Pipelines is a fully managed build service that compiles source code, runs tests, and produces software packages.
367

A law firm wants to digitize millions of scanned contracts. You need an AI service to extract text, forms, and tables from these PDF documents automatically. Which service is designed for this?

Azure Speech Services
Azure Bot Service
Azure Form Recognizer
Azure Computer Vision
View Explanation
✓ Correct Answer: Azure Form RecognizerExplanation:Azure Form Recognizer uses machine learning to extract text, handwriting, and data from scanned documents.
368

You are building a customer support chatbot that needs to understand natural language intent (e.g., 'book a flight'). Which service provides Natural Language Understanding (NLU) capabilities?

Azure Bot Service
Azure Computer Vision
Azure Machine Learning
Azure Form Recognizer
View Explanation
✓ Correct Answer: Azure Bot ServiceExplanation:Azure Bot Service provides conversational AI capabilities to build interfaces like chatbots that understand natural language.
369

Your data science team needs a fully managed environment to build, train, and deploy custom machine learning models using TensorFlow. Which platform provides these end-to-end MLOps capabilities?

Azure Speech Services
Azure Bot Service
Azure Computer Vision
Azure Machine Learning
View Explanation
✓ Correct Answer: Azure Machine LearningExplanation:Azure Machine Learning is the comprehensive platform for the entire machine learning lifecycle, from building models to deployment.
370

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Share full administrative credentials
Create long-term access keys for each developer
Use Azure Virtual Machines instance profiles
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
371

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Roles with cross-account access
Share access keys between accounts
Create duplicate users in both accounts
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
372

Your application requires high CPU performance for compute-intensive workloads like video encoding. Which Azure Virtual Machines instance type is optimized for this?

Azure Functions
Compute Optimized Azure Virtual Machines instances
Memory Optimized instances
General Purpose instances
View Explanation
✓ Correct Answer: Compute Optimized Azure Virtual Machines instancesExplanation:Compute Optimized Azure Virtual Machines instances provide high-performance processors ideal for compute-intensive applications.
373

Your High Performance Computing (HPC) workload requires low network latency between Azure Virtual Machines instances. What feature should you use?

Spread Placement Groups
Azure Virtual Network peering
Azure Load Balancer
Cluster Placement or Proximity Placement Groups
View Explanation
✓ Correct Answer: Cluster Placement or Proximity Placement GroupsExplanation:Placement groups pack instances close together in a single availability zone or data center for low-latency, high-throughput networking.
374

Your application requires persistent block storage that survives Azure Virtual Machines instance termination. Which service should you use?

Azure Blob Storage
Azure Managed Disks
Ephemeral/Instance Store
Azure Files
View Explanation
✓ Correct Answer: Azure Managed DisksExplanation:Azure Managed Disks volumes persist independently from virtual machine instances and can be attached/detached as needed.
375

You need to create a backup of your Azure Managed Disks volume for disaster recovery. What feature should you use?

Azure Managed Disks Snapshots
Azure Blob Storage versioning
Azure SQL Database backups
Azure Virtual Machines Image/AMI
View Explanation
✓ Correct Answer: Azure Managed Disks SnapshotsExplanation:Azure Managed Disks Snapshots are incremental backups typically stored in Azure Blob Storage, providing point-in-time recovery.
376

You need to create a logically isolated section of your cloud environment where you can launch resources in a virtual network that you define. Which service provides this?

Azure Virtual Network
Network Security Groups (NSG)
Azure Load Balancer
Azure Active Directory (Entra ID)
View Explanation
✓ Correct Answer: Azure Virtual NetworkExplanation:Azure Virtual Network enables you to launch cloud resources in a logically isolated virtual network with full control over IP addressing, subnets, and routing.
377

You are designing a serverless microservices architecture for a new startup. The application needs to handle unpredictable traffic spikes without managing any underlying infrastructure. Which compute service should you use?

Azure SQL Database
Azure Functions
Azure Virtual Machines
Azure Kubernetes Service (AKS)
View Explanation
✓ Correct Answer: Azure FunctionsExplanation:Azure Functions is a serverless compute service that automatically scales with demand, making it ideal for unpredictable traffic without infrastructure management.
378

A financial application requires a relational database that supports high availability and automated backups. The database must be fully managed to reduce operational overhead. Which service fits these requirements?

Azure Blob Storage
Azure Virtual Machines
Azure Cosmos DB
Azure SQL Database
View Explanation
✓ Correct Answer: Azure SQL DatabaseExplanation:Azure SQL Database is a fully managed relational database service that supports high availability and automated backups out of the box.
379

You need to host a static website (HTML, CSS, JS) with the lowest possible cost and high durability. You do not need server-side processing. Which storage solution should you choose?

Azure Virtual Machines running a web server
Azure Blob Storage configured for static website hosting
Azure Managed Disks
Azure SQL Database
View Explanation
✓ Correct Answer: Azure Blob Storage configured for static website hostingExplanation:Azure Blob Storage supports static website hosting directly, offering high durability and low cost compared to running a VM.
380

Your media company streams video content to users globally. Users in different regions are experiencing high latency. You need to improve performance by caching content closer to the users. Which service should you implement?

Azure Virtual Network
Azure CDN
Azure DNS
Azure Load Balancer
View Explanation
✓ Correct Answer: Azure CDNExplanation:Azure CDN caches content at edge locations around the world, significantly reducing latency for global users.
381

Your public-facing web application is under a Distributed Denial of Service (DDoS) attack. You need a managed service to detect and mitigate these attacks automatically. What should you enable?

Azure Virtual Network
Azure Active Directory (Entra ID)
Azure DDoS Protection
Azure Key Vault
View Explanation
✓ Correct Answer: Azure DDoS ProtectionExplanation:Azure DDoS Protection provides always-on detection and automatic inline mitigations to minimize application downtime and latency during a DDoS attack.
382

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Azure Key Vault
Azure Web Application Firewall
Azure Active Directory (Entra ID)
Azure Blob Storage
View Explanation
✓ Correct Answer: Azure Key VaultExplanation:Azure Key Vault is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
383

You are analyzing petabytes of data for business intelligence reports. You need a fully managed, serverless enterprise data warehouse that supports SQL queries. Which service is best suited for this task?

Azure Cosmos DB
Azure SQL Database
Azure Files
Azure Synapse Analytics
View Explanation
✓ Correct Answer: Azure Synapse AnalyticsExplanation:Azure Synapse Analytics is designed for large-scale data warehousing and analytics, allowing you to run SQL queries on petabytes of data.
384

Your application generates millions of clickstream events per second. You need a service to ingest and buffer this data in real-time before processing it. Which service fits this need?

Azure Cosmos DB (or Stream service)
Azure Functions
Azure Archive Storage
Azure SQL Database
View Explanation
✓ Correct Answer: Azure Cosmos DB (or Stream service)Explanation:High-throughput ingestion is a core use case for scalable services like Azure Cosmos DB or dedicated streaming services.
385

Your team wants to automate the provisioning of infrastructure to ensure consistency across environments. You need to define your infrastructure as code (IaC) using declarative templates. Which service should you use?

Azure Virtual Machines
Azure Repos
Azure Pipelines
Azure Resource Manager (ARM)
View Explanation
✓ Correct Answer: Azure Resource Manager (ARM)Explanation:Azure Resource Manager (ARM) allows you to model and provision all your cloud infrastructure resources through code templates.
386

You are designing a CI/CD pipeline. You need a service to compile source code, run tests, and produce software packages that are ready to deploy. Which service handles the build phase?

Azure Resource Manager (ARM)
Azure Repos
Azure Pipelines
Azure Functions
View Explanation
✓ Correct Answer: Azure PipelinesExplanation:Azure Pipelines is a fully managed build service that compiles source code, runs tests, and produces software packages.
387

A law firm wants to digitize millions of scanned contracts. You need an AI service to extract text, forms, and tables from these PDF documents automatically. Which service is designed for this?

Azure Bot Service
Azure Form Recognizer
Azure Speech Services
Azure Computer Vision
View Explanation
✓ Correct Answer: Azure Form RecognizerExplanation:Azure Form Recognizer uses machine learning to extract text, handwriting, and data from scanned documents.
388

You are building a customer support chatbot that needs to understand natural language intent (e.g., 'book a flight'). Which service provides Natural Language Understanding (NLU) capabilities?

Azure Form Recognizer
Azure Bot Service
Azure Computer Vision
Azure Machine Learning
View Explanation
✓ Correct Answer: Azure Bot ServiceExplanation:Azure Bot Service provides conversational AI capabilities to build interfaces like chatbots that understand natural language.
389

Your data science team needs a fully managed environment to build, train, and deploy custom machine learning models using TensorFlow. Which platform provides these end-to-end MLOps capabilities?

Azure Machine Learning
Azure Computer Vision
Azure Speech Services
Azure Bot Service
View Explanation
✓ Correct Answer: Azure Machine LearningExplanation:Azure Machine Learning is the comprehensive platform for the entire machine learning lifecycle, from building models to deployment.
390

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Share full administrative credentials
Create long-term access keys for each developer
Use Azure Virtual Machines instance profiles
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
391

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Roles with cross-account access
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Share access keys between accounts
Create duplicate users in both accounts
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
392

Your application requires high CPU performance for compute-intensive workloads like video encoding. Which Azure Virtual Machines instance type is optimized for this?

Memory Optimized instances
Compute Optimized Azure Virtual Machines instances
General Purpose instances
Azure Functions
View Explanation
✓ Correct Answer: Compute Optimized Azure Virtual Machines instancesExplanation:Compute Optimized Azure Virtual Machines instances provide high-performance processors ideal for compute-intensive applications.
393

Your High Performance Computing (HPC) workload requires low network latency between Azure Virtual Machines instances. What feature should you use?

Cluster Placement or Proximity Placement Groups
Azure Virtual Network peering
Azure Load Balancer
Spread Placement Groups
View Explanation
✓ Correct Answer: Cluster Placement or Proximity Placement GroupsExplanation:Placement groups pack instances close together in a single availability zone or data center for low-latency, high-throughput networking.
394

Your application requires persistent block storage that survives Azure Virtual Machines instance termination. Which service should you use?

Azure Files
Azure Blob Storage
Ephemeral/Instance Store
Azure Managed Disks
View Explanation
✓ Correct Answer: Azure Managed DisksExplanation:Azure Managed Disks volumes persist independently from virtual machine instances and can be attached/detached as needed.
395

You need to create a backup of your Azure Managed Disks volume for disaster recovery. What feature should you use?

Azure Virtual Machines Image/AMI
Azure SQL Database backups
Azure Blob Storage versioning
Azure Managed Disks Snapshots
View Explanation
✓ Correct Answer: Azure Managed Disks SnapshotsExplanation:Azure Managed Disks Snapshots are incremental backups typically stored in Azure Blob Storage, providing point-in-time recovery.
396

You need to create a logically isolated section of your cloud environment where you can launch resources in a virtual network that you define. Which service provides this?

Azure Load Balancer
Network Security Groups (NSG)
Azure Virtual Network
Azure Active Directory (Entra ID)
View Explanation
✓ Correct Answer: Azure Virtual NetworkExplanation:Azure Virtual Network enables you to launch cloud resources in a logically isolated virtual network with full control over IP addressing, subnets, and routing.
397

You are designing a serverless microservices architecture for a new startup. The application needs to handle unpredictable traffic spikes without managing any underlying infrastructure. Which compute service should you use?

Azure SQL Database
Azure Kubernetes Service (AKS)
Azure Virtual Machines
Azure Functions
View Explanation
✓ Correct Answer: Azure FunctionsExplanation:Azure Functions is a serverless compute service that automatically scales with demand, making it ideal for unpredictable traffic without infrastructure management.
398

A financial application requires a relational database that supports high availability and automated backups. The database must be fully managed to reduce operational overhead. Which service fits these requirements?

Azure Virtual Machines
Azure Blob Storage
Azure Cosmos DB
Azure SQL Database
View Explanation
✓ Correct Answer: Azure SQL DatabaseExplanation:Azure SQL Database is a fully managed relational database service that supports high availability and automated backups out of the box.
399

You need to host a static website (HTML, CSS, JS) with the lowest possible cost and high durability. You do not need server-side processing. Which storage solution should you choose?

Azure Managed Disks
Azure SQL Database
Azure Virtual Machines running a web server
Azure Blob Storage configured for static website hosting
View Explanation
✓ Correct Answer: Azure Blob Storage configured for static website hostingExplanation:Azure Blob Storage supports static website hosting directly, offering high durability and low cost compared to running a VM.
400

Your media company streams video content to users globally. Users in different regions are experiencing high latency. You need to improve performance by caching content closer to the users. Which service should you implement?

Azure Load Balancer
Azure CDN
Azure DNS
Azure Virtual Network
View Explanation
✓ Correct Answer: Azure CDNExplanation:Azure CDN caches content at edge locations around the world, significantly reducing latency for global users.
401

Your public-facing web application is under a Distributed Denial of Service (DDoS) attack. You need a managed service to detect and mitigate these attacks automatically. What should you enable?

Azure Virtual Network
Azure Active Directory (Entra ID)
Azure DDoS Protection
Azure Key Vault
View Explanation
✓ Correct Answer: Azure DDoS ProtectionExplanation:Azure DDoS Protection provides always-on detection and automatic inline mitigations to minimize application downtime and latency during a DDoS attack.
402

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Azure Key Vault
Azure Web Application Firewall
Azure Active Directory (Entra ID)
Azure Blob Storage
View Explanation
✓ Correct Answer: Azure Key VaultExplanation:Azure Key Vault is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
403

You are analyzing petabytes of data for business intelligence reports. You need a fully managed, serverless enterprise data warehouse that supports SQL queries. Which service is best suited for this task?

Azure SQL Database
Azure Files
Azure Synapse Analytics
Azure Cosmos DB
View Explanation
✓ Correct Answer: Azure Synapse AnalyticsExplanation:Azure Synapse Analytics is designed for large-scale data warehousing and analytics, allowing you to run SQL queries on petabytes of data.
404

Your application generates millions of clickstream events per second. You need a service to ingest and buffer this data in real-time before processing it. Which service fits this need?

Azure Cosmos DB (or Stream service)
Azure Functions
Azure Archive Storage
Azure SQL Database
View Explanation
✓ Correct Answer: Azure Cosmos DB (or Stream service)Explanation:High-throughput ingestion is a core use case for scalable services like Azure Cosmos DB or dedicated streaming services.
405

Your team wants to automate the provisioning of infrastructure to ensure consistency across environments. You need to define your infrastructure as code (IaC) using declarative templates. Which service should you use?

Azure Virtual Machines
Azure Resource Manager (ARM)
Azure Pipelines
Azure Repos
View Explanation
✓ Correct Answer: Azure Resource Manager (ARM)Explanation:Azure Resource Manager (ARM) allows you to model and provision all your cloud infrastructure resources through code templates.
406

You are designing a CI/CD pipeline. You need a service to compile source code, run tests, and produce software packages that are ready to deploy. Which service handles the build phase?

Azure Pipelines
Azure Resource Manager (ARM)
Azure Repos
Azure Functions
View Explanation
✓ Correct Answer: Azure PipelinesExplanation:Azure Pipelines is a fully managed build service that compiles source code, runs tests, and produces software packages.
407

A law firm wants to digitize millions of scanned contracts. You need an AI service to extract text, forms, and tables from these PDF documents automatically. Which service is designed for this?

Azure Form Recognizer
Azure Speech Services
Azure Computer Vision
Azure Bot Service
View Explanation
✓ Correct Answer: Azure Form RecognizerExplanation:Azure Form Recognizer uses machine learning to extract text, handwriting, and data from scanned documents.
408

You are building a customer support chatbot that needs to understand natural language intent (e.g., 'book a flight'). Which service provides Natural Language Understanding (NLU) capabilities?

Azure Computer Vision
Azure Bot Service
Azure Form Recognizer
Azure Machine Learning
View Explanation
✓ Correct Answer: Azure Bot ServiceExplanation:Azure Bot Service provides conversational AI capabilities to build interfaces like chatbots that understand natural language.
409

Your data science team needs a fully managed environment to build, train, and deploy custom machine learning models using TensorFlow. Which platform provides these end-to-end MLOps capabilities?

Azure Bot Service
Azure Speech Services
Azure Computer Vision
Azure Machine Learning
View Explanation
✓ Correct Answer: Azure Machine LearningExplanation:Azure Machine Learning is the comprehensive platform for the entire machine learning lifecycle, from building models to deployment.
410

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Use Azure Virtual Machines instance profiles
Create long-term access keys for each developer
Share full administrative credentials
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
411

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Roles with cross-account access
Share access keys between accounts
Create duplicate users in both accounts
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
412

Your application requires high CPU performance for compute-intensive workloads like video encoding. Which Azure Virtual Machines instance type is optimized for this?

Azure Functions
Compute Optimized Azure Virtual Machines instances
General Purpose instances
Memory Optimized instances
View Explanation
✓ Correct Answer: Compute Optimized Azure Virtual Machines instancesExplanation:Compute Optimized Azure Virtual Machines instances provide high-performance processors ideal for compute-intensive applications.
413

Your High Performance Computing (HPC) workload requires low network latency between Azure Virtual Machines instances. What feature should you use?

Cluster Placement or Proximity Placement Groups
Azure Load Balancer
Azure Virtual Network peering
Spread Placement Groups
View Explanation
✓ Correct Answer: Cluster Placement or Proximity Placement GroupsExplanation:Placement groups pack instances close together in a single availability zone or data center for low-latency, high-throughput networking.
414

Your application requires persistent block storage that survives Azure Virtual Machines instance termination. Which service should you use?

Azure Files
Azure Managed Disks
Ephemeral/Instance Store
Azure Blob Storage
View Explanation
✓ Correct Answer: Azure Managed DisksExplanation:Azure Managed Disks volumes persist independently from virtual machine instances and can be attached/detached as needed.
415

You need to create a backup of your Azure Managed Disks volume for disaster recovery. What feature should you use?

Azure Virtual Machines Image/AMI
Azure SQL Database backups
Azure Blob Storage versioning
Azure Managed Disks Snapshots
View Explanation
✓ Correct Answer: Azure Managed Disks SnapshotsExplanation:Azure Managed Disks Snapshots are incremental backups typically stored in Azure Blob Storage, providing point-in-time recovery.
416

You need to create a logically isolated section of your cloud environment where you can launch resources in a virtual network that you define. Which service provides this?

Azure Load Balancer
Network Security Groups (NSG)
Azure Active Directory (Entra ID)
Azure Virtual Network
View Explanation
✓ Correct Answer: Azure Virtual NetworkExplanation:Azure Virtual Network enables you to launch cloud resources in a logically isolated virtual network with full control over IP addressing, subnets, and routing.
417

You are designing a serverless microservices architecture for a new startup. The application needs to handle unpredictable traffic spikes without managing any underlying infrastructure. Which compute service should you use?

Azure Functions
Azure SQL Database
Azure Virtual Machines
Azure Kubernetes Service (AKS)
View Explanation
✓ Correct Answer: Azure FunctionsExplanation:Azure Functions is a serverless compute service that automatically scales with demand, making it ideal for unpredictable traffic without infrastructure management.
418

A financial application requires a relational database that supports high availability and automated backups. The database must be fully managed to reduce operational overhead. Which service fits these requirements?

Azure SQL Database
Azure Virtual Machines
Azure Blob Storage
Azure Cosmos DB
View Explanation
✓ Correct Answer: Azure SQL DatabaseExplanation:Azure SQL Database is a fully managed relational database service that supports high availability and automated backups out of the box.
419

You need to host a static website (HTML, CSS, JS) with the lowest possible cost and high durability. You do not need server-side processing. Which storage solution should you choose?

Azure Managed Disks
Azure SQL Database
Azure Virtual Machines running a web server
Azure Blob Storage configured for static website hosting
View Explanation
✓ Correct Answer: Azure Blob Storage configured for static website hostingExplanation:Azure Blob Storage supports static website hosting directly, offering high durability and low cost compared to running a VM.
420

Your media company streams video content to users globally. Users in different regions are experiencing high latency. You need to improve performance by caching content closer to the users. Which service should you implement?

Azure CDN
Azure Load Balancer
Azure DNS
Azure Virtual Network
View Explanation
✓ Correct Answer: Azure CDNExplanation:Azure CDN caches content at edge locations around the world, significantly reducing latency for global users.
421

Your public-facing web application is under a Distributed Denial of Service (DDoS) attack. You need a managed service to detect and mitigate these attacks automatically. What should you enable?

Azure Key Vault
Azure Active Directory (Entra ID)
Azure Virtual Network
Azure DDoS Protection
View Explanation
✓ Correct Answer: Azure DDoS ProtectionExplanation:Azure DDoS Protection provides always-on detection and automatic inline mitigations to minimize application downtime and latency during a DDoS attack.
422

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

Azure Blob Storage
Azure Active Directory (Entra ID)
Azure Web Application Firewall
Azure Key Vault
View Explanation
✓ Correct Answer: Azure Key VaultExplanation:Azure Key Vault is a managed service that makes it easy to create and control the cryptographic keys used to encrypt your data.
423

You are analyzing petabytes of data for business intelligence reports. You need a fully managed, serverless enterprise data warehouse that supports SQL queries. Which service is best suited for this task?

Azure SQL Database
Azure Files
Azure Cosmos DB
Azure Synapse Analytics
View Explanation
✓ Correct Answer: Azure Synapse AnalyticsExplanation:Azure Synapse Analytics is designed for large-scale data warehousing and analytics, allowing you to run SQL queries on petabytes of data.
424

Your application generates millions of clickstream events per second. You need a service to ingest and buffer this data in real-time before processing it. Which service fits this need?

Azure Archive Storage
Azure Cosmos DB (or Stream service)
Azure SQL Database
Azure Functions
View Explanation
✓ Correct Answer: Azure Cosmos DB (or Stream service)Explanation:High-throughput ingestion is a core use case for scalable services like Azure Cosmos DB or dedicated streaming services.
425

Your team wants to automate the provisioning of infrastructure to ensure consistency across environments. You need to define your infrastructure as code (IaC) using declarative templates. Which service should you use?

Azure Pipelines
Azure Resource Manager (ARM)
Azure Virtual Machines
Azure Repos
View Explanation
✓ Correct Answer: Azure Resource Manager (ARM)Explanation:Azure Resource Manager (ARM) allows you to model and provision all your cloud infrastructure resources through code templates.
426

You are designing a CI/CD pipeline. You need a service to compile source code, run tests, and produce software packages that are ready to deploy. Which service handles the build phase?

Azure Resource Manager (ARM)
Azure Functions
Azure Pipelines
Azure Repos
View Explanation
✓ Correct Answer: Azure PipelinesExplanation:Azure Pipelines is a fully managed build service that compiles source code, runs tests, and produces software packages.
427

A law firm wants to digitize millions of scanned contracts. You need an AI service to extract text, forms, and tables from these PDF documents automatically. Which service is designed for this?

Azure Bot Service
Azure Computer Vision
Azure Speech Services
Azure Form Recognizer
View Explanation
✓ Correct Answer: Azure Form RecognizerExplanation:Azure Form Recognizer uses machine learning to extract text, handwriting, and data from scanned documents.
428

You are building a customer support chatbot that needs to understand natural language intent (e.g., 'book a flight'). Which service provides Natural Language Understanding (NLU) capabilities?

Azure Machine Learning
Azure Bot Service
Azure Computer Vision
Azure Form Recognizer
View Explanation
✓ Correct Answer: Azure Bot ServiceExplanation:Azure Bot Service provides conversational AI capabilities to build interfaces like chatbots that understand natural language.
429

Your data science team needs a fully managed environment to build, train, and deploy custom machine learning models using TensorFlow. Which platform provides these end-to-end MLOps capabilities?

Azure Machine Learning
Azure Computer Vision
Azure Bot Service
Azure Speech Services
View Explanation
✓ Correct Answer: Azure Machine LearningExplanation:Azure Machine Learning is the comprehensive platform for the entire machine learning lifecycle, from building models to deployment.
430

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
Share full administrative credentials
Create long-term access keys for each developer
Use Azure Virtual Machines instance profiles
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
431

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Azure Active Directory (Entra ID) Roles with cross-account access
Create duplicate users in both accounts
Share access keys between accounts
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
432

Your application requires high CPU performance for compute-intensive workloads like video encoding. Which Azure Virtual Machines instance type is optimized for this?

Compute Optimized Azure Virtual Machines instances
General Purpose instances
Memory Optimized instances
Azure Functions
View Explanation
✓ Correct Answer: Compute Optimized Azure Virtual Machines instancesExplanation:Compute Optimized Azure Virtual Machines instances provide high-performance processors ideal for compute-intensive applications.
433

Your High Performance Computing (HPC) workload requires low network latency between Azure Virtual Machines instances. What feature should you use?

Cluster Placement or Proximity Placement Groups
Spread Placement Groups
Azure Load Balancer
Azure Virtual Network peering
View Explanation
✓ Correct Answer: Cluster Placement or Proximity Placement GroupsExplanation:Placement groups pack instances close together in a single availability zone or data center for low-latency, high-throughput networking.
434

Your application requires persistent block storage that survives Azure Virtual Machines instance termination. Which service should you use?

Azure Files
Azure Blob Storage
Azure Managed Disks
Ephemeral/Instance Store
View Explanation
✓ Correct Answer: Azure Managed DisksExplanation:Azure Managed Disks volumes persist independently from virtual machine instances and can be attached/detached as needed.
435

You need to create a backup of your Azure Managed Disks volume for disaster recovery. What feature should you use?

Azure SQL Database backups
Azure Blob Storage versioning
Azure Managed Disks Snapshots
Azure Virtual Machines Image/AMI
View Explanation
✓ Correct Answer: Azure Managed Disks SnapshotsExplanation:Azure Managed Disks Snapshots are incremental backups typically stored in Azure Blob Storage, providing point-in-time recovery.
436

You need to create a logically isolated section of your cloud environment where you can launch resources in a virtual network that you define. Which service provides this?

Azure Active Directory (Entra ID)
Azure Load Balancer
Network Security Groups (NSG)
Azure Virtual Network
View Explanation
✓ Correct Answer: Azure Virtual NetworkExplanation:Azure Virtual Network enables you to launch cloud resources in a logically isolated virtual network with full control over IP addressing, subnets, and routing.