Home/Directory/azure

azure Practice Questions

Page 8 of 15 (1456 total questions)

To protect your virtual machines from brute-force RDP and SSH attacks, which feature of Microsoft Defender for Cloud should you implement to provide 'Just-In-Time' (JIT) network access?
View Question & Answer ➔
You are designing a high-scale microservices application. You want to use a serverless container platform that handles scaling, traffic splitting (for blue/green deployments), and Dapr integration without managing Kubernetes clusters. Which service should you choose?
View Question & Answer ➔
Which Azure security feature provides a way to 'Shadow' or proxy your on-premises SSH and RDP management traffic through the Azure portal, eliminating the need for public IP addresses on your VMs?
View Question & Answer ➔
To increase the availability of your application, you want to deploy your virtual machines across different data centers within an Azure region that have independent power, cooling, and networking. What is this concept called?
View Question & Answer ➔
Your organization wants to optimize the cost of their high-performance computing (HPC) cluster in Azure. The workload can tolerate interruptions and can be restarted from checkpoints. Which VM purchasing option provides the highest discount for this scenario?
View Question & Answer ➔
Which Azure feature allows you to ensure that your virtual machines are physically located as close to each other as possible within a data center to minimize network latency for a low-latency application?
View Question & Answer ➔
Which Azure networking service allows you to create a secure entrance into your Azure Virtual Network to manage your VMs over the internet using SSH or RDP, without exposing the VMs' public IP addresses?
View Question & Answer ➔
To provide high-availability for a stateful web application within a single region, you want to ensure that your virtual machine instances are distributed across multiple racks with independent power and networking. What should you use?
View Question & Answer ➔
To protect your Azure virtual machines from malware and other advanced threats, which centralized security service provides behavioral analysis and vulnerability scanning across your hybrid cloud environment?
View Question & Answer ➔
Your application requires persistent block storage that survives Azure Virtual Machines instance termination. Which service should you use?
View Question & Answer ➔
You need to create a backup of your Azure Managed Disks volume for disaster recovery. What feature should you use?
View Question & Answer ➔
Your organization is running a high-performance database that requires sub-millisecond latency and the ability to dynamically scale IOPS and throughput up to 160,000 IOPS without restarting the VM. Which Azure Managed Disk type should you choose?
View Question & Answer ➔
Which Azure storage service provides a cloud-native, fully managed SAN (Storage Area Network) solution that can be shared across multiple virtual machines to provide high-performance block storage for SQL Server or SAP Hana?
View Question & Answer ➔
Which Azure storage feature allows you to create a high-performance cluster of virtual machines that can access the same NTFS-formatted disk volume simultaneously for a failover cluster application?
View Question & Answer ➔
Which identity feature allow an organization to implement 'Just-In-Time' (JIT) administrative access, so developers only have 'Contributor' access to production subscriptions for 2 hours after getting approval?
View Question & Answer ➔
Scenario: To secure your Azure resources, you want to ensure that all developers must use Multi-Factor Authentication (MFA) and must be on a company-managed device to access the Azure portal. Which identity feature should you use?
View Question & Answer ➔
How can you securely store and retrieve connection strings and passwords in Azure so they are not hardcoded in your application's source code or configuration files?
View Question & Answer ➔
Which Azure service provides a cloud-native Security Information and Event Management (SIEM) and Security Orchestration, Automation, and Response (SOAR) solution for the entire enterprise?
View Question & Answer ➔
An organization is using Azure Key Vault to store encryption keys. They must ensure that the keys are stored in a physical Hardware Security Module (HSM) that is FIPS 140-2 Level 3 compliant and that Azure administrators cannot access the key material. Which Key Vault tier or service should they use?
View Question & Answer ➔
You need to create a logically isolated section of your cloud environment where you can launch resources in a virtual network that you define. Which service provides this?
View Question & Answer ➔
An organization wants to connect their on-premises data center to Azure using a dedicated, high-performance physical connection that does NOT go over the public internet. Which service provides this?
View Question & Answer ➔
To connect your on-premises offices to Azure in a 'Hub-and-Spoke' model where Azure acts as the central router for all your office-to-office and office-to-VNet traffic, which service should you use?
View Question & Answer ➔
Which Azure networking service allows you to create a secure, private connection between your Azure VNet and a 3rd-party SaaS provider (like Snowflake) without the traffic ever touching the public internet?
View Question & Answer ➔
An organization wants to connect two Azure Virtual Networks (VNets) in different regions so that resources in one VNet can communicate with resources in the other using private IP addresses. What is the most efficient way to achieve this?
View Question & Answer ➔
Which Azure networking service allows you to create a secure, private connection from your VNet to a specific Azure PaaS service (like Azure SQL Database) without using a public IP address or Service Endpoints?
View Question & Answer ➔
Your organization wants to simplify its global branch connectivity by using Azure as a central hub. They want to interconnect multiple ExpressRoute sites, VPN sites, and VNets while providing automated, optimized routing. Which Azure service is designed for this large-scale hub-and-spoke networking?
View Question & Answer ➔
An enterprise wants to secure their DNS traffic for their hybrid cloud environment. They need to resolve Azure private DNS zones from on-premises and on-premises domains from Azure VNets without managing custom DNS servers on VMs. Which service should they use?
View Question & Answer ➔
Which Azure networking service allows you to create a secure, private connection between your on-premises network and Azure over the internet with the ability to dynamically route traffic using BGP?
View Question & Answer ➔
An organization wants to analyze their network traffic to identify security threats like data exfiltration or connections to known malicious IP addresses. They need a tool that can analyze NSG flow logs and provide threat intelligence. Which tool should they use?
View Question & Answer ➔
You need stateful firewall rules at the Azure Virtual Machines instance level. What should you configure?
View Question & Answer ➔
To protect your Azure virtual machines from being accessed by unauthorized users from the internet, you want to implement a solution that requires a second factor of authentication (MFA) and restricts access based on the user's location. Which service should you use?
View Question & Answer ➔
Scenario: To minimize the blast radius of a potential compromise, you want to ensure that your developers can only access the production environment from machines that are compliant with your organization's security policy. Which identity feature enables this?
View Question & Answer ➔
Which Azure identity feature allow you to provide access to your Azure resources for external 'Customers' (like users of your mobile app) using their own social identities without them being added as 'Guests' in your corporate Entra ID tenant?
View Question & Answer ➔
Which Azure security service uses machine learning to identify lateral movement and other post-compromise activity by analyzing your on-premises Active Directory Domain Services (AD DS) signals?
View Question & Answer ➔
To protect your enterprise from a large-scale data leak, you want to ensure that any document stored in Azure that contains a 'Secret' tag is automatically blocked from being shared with external guest users. Which service provides this data loss prevention?
View Question & Answer ➔
An enterprise wants to secure their cloud-native applications by eliminating the need for long-lived secrets when their workloads (running in AKS or GitHub Actions) access Azure resources. Which identity feature should they implement?
View Question & Answer ➔
An organization wants to analyze their Entra ID (Azure AD) permissions to identify 'over-privileged' users and service principals across their entire multi-cloud estate (Azure, AWS, GCP). Which Microsoft Entra service provides this Cloud Infrastructure Entitlement Management (CIEM) capability?
View Question & Answer ➔
How can you securely provide temporary access to a specific Azure Resource Group for an external consultant without adding them as a permanent guest in your tenant or sharing passwords?
View Question & Answer ➔
Your organization wants to implement 'Attribute-based Access Control' (ABAC) in Azure to simplify permission management. They want to ensure that developers can only start/stop virtual machines that have a 'ProjectID' tag matching the 'ProjectID' tag on the developer's Entra ID user profile. Which Azure feature enables this dynamic comparison?
View Question & Answer ➔
You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?
View Question & Answer ➔
You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?
View Question & Answer ➔
To inspect and filter all East-West traffic between your Azure VNets and North-South traffic from your VNet to the internet, which centralized security service should you deploy?
View Question & Answer ➔
To protect your public-facing web applications from DDoS attacks that target the application layer (Layer 7), which feature of Azure Front Door or Application Gateway should you enable?
View Question & Answer ➔
Which Azure security service allows you to centrally manage and deploy firewall rules across multiple virtual networks and regions using a single management policy?
View Question & Answer ➔
An organization wants to implement 'Zero Trust' networking and wants to ensure that all internal API traffic is inspected by a central firewall without needing to manage complex 'User Defined Routes' (UDR) for every subnet. Which feature helps automate the routing to the firewall?
View Question & Answer ➔
Which Azure networking feature allows you to connect multiple VNets in different subscriptions to a central 'Firewall VNet' for traffic inspection without needing to create manual 'User Defined Routes' (UDR) for every subnet?
View Question & Answer ➔
Whcih Azure security service provides 'Threat Intelligence' to protect your Azure accounts from compromised identities by analyzing billions of signals daily to detect 'Impossible Travel' and 'Leaked Credentials'?
View Question & Answer ➔
Which Azure security service allows you to automatically rotate your database passwords every 30 days and provides a managed way to inject these secrets into your Azure Functions without human intervention?
View Question & Answer ➔
How can you analyze the 'Blast Radius' of a potential identity compromise by identifying exactly which resources that user has permission to access across your entire Azure Organization?
View Question & Answer ➔
You need to monitor CPU utilization of your Azure Virtual Machines instances and set up alarms for automated actions. Which service should you use?
View Question & Answer ➔
Your application running on Azure Virtual Machines needs a central location for log aggregation and real-time analysis. Which Azure Monitor capability should you use?
View Question & Answer ➔
Which Azure monitoring tool allows you to perform complex, interactive analytics and kusto-based queries across millions of log records from various sources like VMs, containers, and web apps?
View Question & Answer ➔
An organization wants to analyze the performance of their web application down to the individual line of code and see detailed telemetry like exception stack traces and SQL query performance. Which Azure Monitor feature provides this deep application-level observability?
View Question & Answer ➔
Which Azure monitoring feature allows you to set up 'Availability Tests' to periodically check the responsiveness and performance of your web application from multiple global locations?
View Question & Answer ➔
Which Azure monitoring service allows you to create 'Workbooks' to build interactive, visual reports that combine data from Log Analytics, Metrics, and other sources for a unified view of your application's health?
View Question & Answer ➔
An organization wants to implement 'Operational Excellence' by automatically receiving recommendations on how to optimize their Azure resources for cost, security, performance, and reliability. Which tool provides these integrated best-practice checks?
View Question & Answer ➔
Which Azure monitoring service provides a health dashboard specifically for the Azure platform itself, notifying you of service outages, planned maintenance, and health advisories that affect your resources?
View Question & Answer ➔
An organization is using Azure monitor to collect logs from thousands of VMs. They want to set up an alert that triggers whenever the 'CPU percentage' of any VM stays above 90% for more than 5 minutes. What type of alert should they create?
View Question & Answer ➔
An enterprise wants to monitor their containerized applications in AKS and needs to collect Prometheus-compatible metrics without managing a separate Prometheus server or Grafana instance. Which Azure Monitor feature provides this managed experience?
View Question & Answer ➔
You need to route traffic to Azure Virtual Machines instances based on URL paths (e.g., '/api' vs '/static'). Which load balancer type should you use?
View Question & Answer ➔
Your organization wants to implement 'Self-Sovereign Identity' (SSI) to allow employees to share their verified employment status with 3rd-party services without revealing their entire profile. Which Azure service enables the creation and management of these decentralized credentials?
View Question & Answer ➔
An organization following the 'Zero Trust' model wants to ensure that access to their internal web apps is granted only if the user is authenticated via their corporate Entra ID AND their device marked as 'Compliant' in Intune. Which feature enables this?
View Question & Answer ➔
Which Azure service allows you to centrally manage and enforce security best practices across all your Azure accounts by providing a set of 'Service Control Policies' (SCPs) or initiatives?
View Question & Answer ➔
You need to perform a one-time update to the 'Access Tier' of 500 million blobs in a storage account to move them from Hot to Archive. Which Azure storage feature is specifically designed to perform actions on a massive number of blobs at scale using a job-based approach?
View Question & Answer ➔
To protect against a large-scale Ransomware attack that modifies or deletes blobs in your storage accounts, which feature should you enable to ensure that data remains immutable for a specified period?
View Question & Answer ➔
Scenario: To minimize the risk of data exfiltration by a rogue administrator, you want to ensure that all access to sensitive blobs in a storage account requires a separate approval from a security manager. Solution ?
View Question & Answer ➔
To improve the performance of an Azure Storage account for a globally distributed team, you want to ensure that files are automatically cached at edge locations to provide low-latency access. Which service should you choose?
View Question & Answer ➔
Which Azure service allows you to build, deploy, and scale complex containerized applications using the industry-standard Kubernetes orchestrator, while Azure manages the underlying control plane?
View Question & Answer ➔
An organization wants to run their mission-critical SAP workload on Azure. They want to ensure that they have a dedicated, physical server in Azure that is isolated from other customers. Which compute option should they choose?
View Question & Answer ➔
Your high-traffic application requires ultra-low latency and needs to handle millions of requests per second at the network level. Which load balancer is best?
View Question & Answer ➔
Which Azure load balancing service operates at Layer 4 (TCP/UDP) and is best suited for scenarios where you need extremely low-latency, non-HTTP traffic distribution within a region?
View Question & Answer ➔
Which Azure load balancing service operates at Layer 4 (TCP/UDP) and provides high throughput and low latency within a single region?
View Question & Answer ➔
To improve the performance and cost of a large fleet of virtual machines that are running web servers, an organization decides to switch to ARM64-based virtual machines. Which Azure VM series should they choose?
View Question & Answer ➔
To reduce the 'Blast Radius' of a potential compromise in a multi-tenant SaaS application, you want to ensure that each customer's Kubernetes pods are isolated at the hardware level. Which Azure feature helps you run 'Confidential Computing' workloads in AKS?
View Question & Answer ➔
To improve the performance and cost-efficiency of a large fleet of web servers which spend most of their time processing PHP/Python requests, you decide to switch from X86 VMs to ARM-based VMs. Which VM series should you choose?
View Question & Answer ➔
Which Azure security feature provides a way to 'Shadow' or proxy your on-premises SSH and RDP management traffic through the Azure portal to your VMs, eliminating the need for public IP addresses?
View Question & Answer ➔
Your organization is migrating a high-performance database cluster that requires extremely low-latency network communication and high throughput (up to 100 Gbps) between nodes. Which Azure feature and placement configuration should you use?
View Question & Answer ➔
What is the primary benefit of using 'Azure Dedicated Host' for an enterprise in the financial sector?
View Question & Answer ➔
Which Azure AI service allows you to automatically identify and redact sensitive information (PII) from text data without buildling custom models?
View Question & Answer ➔
Which Azure networking service allows you to create a secure, private connection between your on-premises servers and specific Azure PaaS services using an ExpressRoute connection without going over the public internet?
View Question & Answer ➔
An organization wants to analyze the network topology of their massive multi-subscription Azure environment. They want a visualization that shows how traffic is flowing between their VNets, Peering connections, and ExpressRoute links. Which tool should they use?
View Question & Answer ➔
An organization wants to connect their Azure environment to 500 different branches globally using their existing internet connections. They want a solution that provides centralized management of the branch VPNs and optimized routing. Solution ?
View Question & Answer ➔
To improve the security and performance of your Azure SQL Database, you want to ensure that it is only accessible via a private IP address within your VNet and that the traffic never traverses the public internet. Which feature should you choose?
View Question & Answer ➔
Which Azure networking service allows you to create a high-performance, private connection between your on-premises network and Azure with 'FastPath' enabled to improve the data path between the network and your VNet VMs?
View Question & Answer ➔
Which Azure networking service allows you to create a secure, high-speed connection between your on-premises routers and an Azure edge location using a 10 Gbps or 100 Gbps physical port?
View Question & Answer ➔
You are designing a centralized security architecture for a massive Azure environment. You need to inspect all incoming North-South 3rd-party traffic using a fleet of NVA (Network Virtual Appliances) that can scale automatically. Which Azure networking service facilitates the transparent injection of these appliances?
View Question & Answer ➔
Which Azure feature allow you to connect multiple VNets in different regions and different subscriptions into a single 'Full Mesh' network with minimal latency and high availability?
View Question & Answer ➔
An organization wants to implement 'Zero Trust' networking for their hybrid cloud environment and wants to ensure that all branch connectivity is centralized, encrypted, and monitored. Which Azure service fits?
View Question & Answer ➔
Which Azure networking service allows you to create a high-performance, private backbone to connect multiple on-premises sites and VNets, effectively replacing a traditional MPLS network?
View Question & Answer ➔
Your company has a hybrid cloud environment with a 10 Gbps ExpressRoute. They want to ensure that if the ExpressRoute circuit fails, traffic automatically fails over to a backup Site-to-Site VPN link using BGP for dynamic routing. Which Azure networking component facilitates this failover?
View Question & Answer ➔
To secure communications between your on-premises data center and Azure, you want a VPN that provides a consistent 1.25 Gbps throughput per tunnel. If you need higher bandwidth (e.g., 10 Gbps), how should you configure your Azure VPN Gateway?
View Question & Answer ➔
Your organization has multiple Azure subscriptions and wants to share a single ExpressRoute circuit among them to reduce costs while maintaining network isolation. Which architectural component facilitates this?
View Question & Answer ➔
Which Azure feature allow you to connect multiple VNets in different regions and different subscriptions into a single 'Hub-and-Spoke' network where the Hub acts as a router for all spoke-to-spoke traffic?
View Question & Answer ➔
Your High Performance Computing (HPC) workload requires low network latency between Azure Virtual Machines instances. What feature should you use?
View Question & Answer ➔
You are hosting a large data analytics workload on Azure HDInsight. To ensure that you are not over-paying for capacity, you want to use a feature that automatically scales the cluster up and down based on the actual CPU and memory demand. Which feature should you enable?
View Question & Answer ➔
An enterprise wants to ensure that all their storage accounts are private and cannot be made public by any user. Which organization-wide switch or policy should they enable?
View Question & Answer ➔
An organization wants to protect their Azure SQL Database from unusual activity and threat patterns like 'Potential SQL Injection'. Which security feature should they enable?
View Question & Answer ➔
Your organization uses Azure Pipelines for CI/CD. You have a pipeline that takes 45 minutes to run and requires compiling large C++ binaries. You are currently using Microsoft-hosted agents, but the build times are unacceptable. You want to reduce build times by utilizing incremental builds and cached dependencies. Which type of agent pool should you configure?
View Question & Answer ➔
You are managing an Azure Repos Git repository. Developers frequently commit directly to the `main` branch, bypassing code reviews and breaking the build. You need to ensure that all changes to `main` are reviewed by at least two people and pass a successful automated build before being merged. What should you configure?
View Question & Answer ➔
Your development team uses npm packages hosted on public registries. Security policies now require that all external dependencies are scanned and cached internally to prevent build failures if the public registry goes down or a package is deleted. Which feature of Azure Artifacts should you implement?
View Question & Answer ➔

← PreviousPage 8 of 15Next →

azure Practice Questions

To protect your virtual machines from brute-force RDP and SSH attacks, which feature of Microsoft Defender for Cloud should you implement to provide 'Just-In-Time' (JIT) network access?

You are designing a high-scale microservices application. You want to use a serverless container platform that handles scaling, traffic splitting (for blue/green deployments), and Dapr integration without managing Kubernetes clusters. Which service should you choose?

Which Azure security feature provides a way to 'Shadow' or proxy your on-premises SSH and RDP management traffic through the Azure portal, eliminating the need for public IP addresses on your VMs?

To increase the availability of your application, you want to deploy your virtual machines across different data centers within an Azure region that have independent power, cooling, and networking. What is this concept called?

Your organization wants to optimize the cost of their high-performance computing (HPC) cluster in Azure. The workload can tolerate interruptions and can be restarted from checkpoints. Which VM purchasing option provides the highest discount for this scenario?

Which Azure feature allows you to ensure that your virtual machines are physically located as close to each other as possible within a data center to minimize network latency for a low-latency application?

Which Azure networking service allows you to create a secure entrance into your Azure Virtual Network to manage your VMs over the internet using SSH or RDP, without exposing the VMs' public IP addresses?

To provide high-availability for a stateful web application within a single region, you want to ensure that your virtual machine instances are distributed across multiple racks with independent power and networking. What should you use?

To protect your Azure virtual machines from malware and other advanced threats, which centralized security service provides behavioral analysis and vulnerability scanning across your hybrid cloud environment?

Your application requires persistent block storage that survives Azure Virtual Machines instance termination. Which service should you use?

You need to create a backup of your Azure Managed Disks volume for disaster recovery. What feature should you use?

Your organization is running a high-performance database that requires sub-millisecond latency and the ability to dynamically scale IOPS and throughput up to 160,000 IOPS without restarting the VM. Which Azure Managed Disk type should you choose?

Which Azure storage service provides a cloud-native, fully managed SAN (Storage Area Network) solution that can be shared across multiple virtual machines to provide high-performance block storage for SQL Server or SAP Hana?

Which Azure storage feature allows you to create a high-performance cluster of virtual machines that can access the same NTFS-formatted disk volume simultaneously for a failover cluster application?

Which identity feature allow an organization to implement 'Just-In-Time' (JIT) administrative access, so developers only have 'Contributor' access to production subscriptions for 2 hours after getting approval?

Scenario: To secure your Azure resources, you want to ensure that all developers must use Multi-Factor Authentication (MFA) and must be on a company-managed device to access the Azure portal. Which identity feature should you use?

How can you securely store and retrieve connection strings and passwords in Azure so they are not hardcoded in your application's source code or configuration files?

Which Azure service provides a cloud-native Security Information and Event Management (SIEM) and Security Orchestration, Automation, and Response (SOAR) solution for the entire enterprise?

You need to create a logically isolated section of your cloud environment where you can launch resources in a virtual network that you define. Which service provides this?

An organization wants to connect their on-premises data center to Azure using a dedicated, high-performance physical connection that does NOT go over the public internet. Which service provides this?

To connect your on-premises offices to Azure in a 'Hub-and-Spoke' model where Azure acts as the central router for all your office-to-office and office-to-VNet traffic, which service should you use?

Which Azure networking service allows you to create a secure, private connection between your Azure VNet and a 3rd-party SaaS provider (like Snowflake) without the traffic ever touching the public internet?

An organization wants to connect two Azure Virtual Networks (VNets) in different regions so that resources in one VNet can communicate with resources in the other using private IP addresses. What is the most efficient way to achieve this?

Which Azure networking service allows you to create a secure, private connection from your VNet to a specific Azure PaaS service (like Azure SQL Database) without using a public IP address or Service Endpoints?

An enterprise wants to secure their DNS traffic for their hybrid cloud environment. They need to resolve Azure private DNS zones from on-premises and on-premises domains from Azure VNets without managing custom DNS servers on VMs. Which service should they use?

Which Azure networking service allows you to create a secure, private connection between your on-premises network and Azure over the internet with the ability to dynamically route traffic using BGP?

An organization wants to analyze their network traffic to identify security threats like data exfiltration or connections to known malicious IP addresses. They need a tool that can analyze NSG flow logs and provide threat intelligence. Which tool should they use?

You need stateful firewall rules at the Azure Virtual Machines instance level. What should you configure?

To protect your Azure virtual machines from being accessed by unauthorized users from the internet, you want to implement a solution that requires a second factor of authentication (MFA) and restricts access based on the user's location. Which service should you use?

Scenario: To minimize the blast radius of a potential compromise, you want to ensure that your developers can only access the production environment from machines that are compliant with your organization's security policy. Which identity feature enables this?

Which Azure identity feature allow you to provide access to your Azure resources for external 'Customers' (like users of your mobile app) using their own social identities without them being added as 'Guests' in your corporate Entra ID tenant?

Which Azure security service uses machine learning to identify lateral movement and other post-compromise activity by analyzing your on-premises Active Directory Domain Services (AD DS) signals?

To protect your enterprise from a large-scale data leak, you want to ensure that any document stored in Azure that contains a 'Secret' tag is automatically blocked from being shared with external guest users. Which service provides this data loss prevention?

An enterprise wants to secure their cloud-native applications by eliminating the need for long-lived secrets when their workloads (running in AKS or GitHub Actions) access Azure resources. Which identity feature should they implement?

An organization wants to analyze their Entra ID (Azure AD) permissions to identify 'over-privileged' users and service principals across their entire multi-cloud estate (Azure, AWS, GCP). Which Microsoft Entra service provides this Cloud Infrastructure Entitlement Management (CIEM) capability?

How can you securely provide temporary access to a specific Azure Resource Group for an external consultant without adding them as a permanent guest in your tenant or sharing passwords?

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

To inspect and filter all East-West traffic between your Azure VNets and North-South traffic from your VNet to the internet, which centralized security service should you deploy?

To protect your public-facing web applications from DDoS attacks that target the application layer (Layer 7), which feature of Azure Front Door or Application Gateway should you enable?

Which Azure security service allows you to centrally manage and deploy firewall rules across multiple virtual networks and regions using a single management policy?

An organization wants to implement 'Zero Trust' networking and wants to ensure that all internal API traffic is inspected by a central firewall without needing to manage complex 'User Defined Routes' (UDR) for every subnet. Which feature helps automate the routing to the firewall?

Which Azure networking feature allows you to connect multiple VNets in different subscriptions to a central 'Firewall VNet' for traffic inspection without needing to create manual 'User Defined Routes' (UDR) for every subnet?

Whcih Azure security service provides 'Threat Intelligence' to protect your Azure accounts from compromised identities by analyzing billions of signals daily to detect 'Impossible Travel' and 'Leaked Credentials'?

Which Azure security service allows you to automatically rotate your database passwords every 30 days and provides a managed way to inject these secrets into your Azure Functions without human intervention?

How can you analyze the 'Blast Radius' of a potential identity compromise by identifying exactly which resources that user has permission to access across your entire Azure Organization?

You need to monitor CPU utilization of your Azure Virtual Machines instances and set up alarms for automated actions. Which service should you use?

Your application running on Azure Virtual Machines needs a central location for log aggregation and real-time analysis. Which Azure Monitor capability should you use?

Which Azure monitoring tool allows you to perform complex, interactive analytics and kusto-based queries across millions of log records from various sources like VMs, containers, and web apps?

An organization wants to analyze the performance of their web application down to the individual line of code and see detailed telemetry like exception stack traces and SQL query performance. Which Azure Monitor feature provides this deep application-level observability?

Which Azure monitoring feature allows you to set up 'Availability Tests' to periodically check the responsiveness and performance of your web application from multiple global locations?

Which Azure monitoring service allows you to create 'Workbooks' to build interactive, visual reports that combine data from Log Analytics, Metrics, and other sources for a unified view of your application's health?

An organization wants to implement 'Operational Excellence' by automatically receiving recommendations on how to optimize their Azure resources for cost, security, performance, and reliability. Which tool provides these integrated best-practice checks?

Which Azure monitoring service provides a health dashboard specifically for the Azure platform itself, notifying you of service outages, planned maintenance, and health advisories that affect your resources?

An organization is using Azure monitor to collect logs from thousands of VMs. They want to set up an alert that triggers whenever the 'CPU percentage' of any VM stays above 90% for more than 5 minutes. What type of alert should they create?

An enterprise wants to monitor their containerized applications in AKS and needs to collect Prometheus-compatible metrics without managing a separate Prometheus server or Grafana instance. Which Azure Monitor feature provides this managed experience?

You need to route traffic to Azure Virtual Machines instances based on URL paths (e.g., '/api' vs '/static'). Which load balancer type should you use?

Your organization wants to implement 'Self-Sovereign Identity' (SSI) to allow employees to share their verified employment status with 3rd-party services without revealing their entire profile. Which Azure service enables the creation and management of these decentralized credentials?

An organization following the 'Zero Trust' model wants to ensure that access to their internal web apps is granted only if the user is authenticated via their corporate Entra ID AND their device marked as 'Compliant' in Intune. Which feature enables this?

Which Azure service allows you to centrally manage and enforce security best practices across all your Azure accounts by providing a set of 'Service Control Policies' (SCPs) or initiatives?

You need to perform a one-time update to the 'Access Tier' of 500 million blobs in a storage account to move them from Hot to Archive. Which Azure storage feature is specifically designed to perform actions on a massive number of blobs at scale using a job-based approach?

To protect against a large-scale Ransomware attack that modifies or deletes blobs in your storage accounts, which feature should you enable to ensure that data remains immutable for a specified period?

Scenario: To minimize the risk of data exfiltration by a rogue administrator, you want to ensure that all access to sensitive blobs in a storage account requires a separate approval from a security manager. Solution ?

To improve the performance of an Azure Storage account for a globally distributed team, you want to ensure that files are automatically cached at edge locations to provide low-latency access. Which service should you choose?

Which Azure service allows you to build, deploy, and scale complex containerized applications using the industry-standard Kubernetes orchestrator, while Azure manages the underlying control plane?

An organization wants to run their mission-critical SAP workload on Azure. They want to ensure that they have a dedicated, physical server in Azure that is isolated from other customers. Which compute option should they choose?

Your high-traffic application requires ultra-low latency and needs to handle millions of requests per second at the network level. Which load balancer is best?

Which Azure load balancing service operates at Layer 4 (TCP/UDP) and is best suited for scenarios where you need extremely low-latency, non-HTTP traffic distribution within a region?

Which Azure load balancing service operates at Layer 4 (TCP/UDP) and provides high throughput and low latency within a single region?

To improve the performance and cost of a large fleet of virtual machines that are running web servers, an organization decides to switch to ARM64-based virtual machines. Which Azure VM series should they choose?

To reduce the 'Blast Radius' of a potential compromise in a multi-tenant SaaS application, you want to ensure that each customer's Kubernetes pods are isolated at the hardware level. Which Azure feature helps you run 'Confidential Computing' workloads in AKS?

To improve the performance and cost-efficiency of a large fleet of web servers which spend most of their time processing PHP/Python requests, you decide to switch from X86 VMs to ARM-based VMs. Which VM series should you choose?

Which Azure security feature provides a way to 'Shadow' or proxy your on-premises SSH and RDP management traffic through the Azure portal to your VMs, eliminating the need for public IP addresses?

Your organization is migrating a high-performance database cluster that requires extremely low-latency network communication and high throughput (up to 100 Gbps) between nodes. Which Azure feature and placement configuration should you use?

What is the primary benefit of using 'Azure Dedicated Host' for an enterprise in the financial sector?

Which Azure AI service allows you to automatically identify and redact sensitive information (PII) from text data without buildling custom models?

Which Azure networking service allows you to create a secure, private connection between your on-premises servers and specific Azure PaaS services using an ExpressRoute connection without going over the public internet?

An organization wants to analyze the network topology of their massive multi-subscription Azure environment. They want a visualization that shows how traffic is flowing between their VNets, Peering connections, and ExpressRoute links. Which tool should they use?

An organization wants to connect their Azure environment to 500 different branches globally using their existing internet connections. They want a solution that provides centralized management of the branch VPNs and optimized routing. Solution ?