Exam (elaborations) TEST BANK FOR Microsoft Certified Azure Fundamenta

Exam (elaborations) TEST BANK FOR Microsoft Certified Azure Fundamenta irewall 78 Web Application Firewall 80 Network Security Groups 81 Application Security Groups 83 User-Defined Routes 83 Azure DDoS Protection 84 Authentication and Authorization 84 Azure Active Directory 84 Authentication and Authorization 86 Azure Multifactor Authentication 87 Conditional Access 87 Single Sign-On (SSO) 88 Security Tools and Features 88 Azure Security Center 88 Azure Key Vault 90 Azure Information Protection 91 Azure Advanced Threat Protection 91 Azure Sentinel 92 Azure Dedicated Hosts 92 Azure Governance Methodologies 93 Azure Policies 93 Azure Initiatives 94 Role-Based Access Control 94 Resource Locks 97 Azure Blueprints 97 Microsoft Cloud Adoption Framework for Azure 99 Azure Monitoring and Reporting Options 100 Azure Monitor 100 Azure Service Health 102 Azure Advisor 103 Compliance and Data Protection Standards 105 Industry Compliance Standards and Terms 105 Microsoft Privacy Statement 106 Online Service Terms 107 Data Protection Addendum 107 Trust Center 107 Service Trust Portal 107 Compliance Manager 108 Azure Government 109 Azure China 109 Summary 110 Exam Essentials 111 Review Questions 114 xvi Contents Chapter 5 Azure Solutions 123 Internet of Things (IoT) 124 Azure IoT Hub 124 Azure IoT Central 125 Azure Sphere 126 Artificial Intelligence 126 Azure Machine Learning 127 Azure Cognitive Services 128 Azure Bot Service 128 Serverless Computing 128 Azure Functions 129 Azure Logic Apps 129 DevOps 130 Azure DevOps Services 130 GitHub and GitHub Actions 130 Azure DevTest Labs 131 Summary 131 Exam Essentials 131 Review Questions 133 Chapter 6 Azure Pricing, Service Levels, and Lifecycle 137 Purchasing Azure Services 138 Azure Subscriptions 138 Purchasing Services 139 Factors Affecting Cost 139 Billing Zones 141 Planning and Managing Azure Costs 141 TCO Calculator 141 Pricing Calculator 143 Managing and Minimizing Azure Cost 144 Azure Cost Management + Billing 148 Service Level Agreements 149 Composite SLAs 150 Availability Zones 150 Service Lifecycles 151 Preview 151 General Availability 151 Summary 152 Exam Essentials 152 Review Questions 154 Chapter 7 Creating and Managing Azure Resources 157 Azure Management Tools 158 Azure Portal 158 Contents xvii Azure PowerShell 160 Azure CLI 161 Azure Cloud Shell 161 Azure Mobile App 162 Using ARM Templates 163 Bringing It All Together 163 Creating and Managing Resources 163 Creating a Free Subscription 164 Creating Resource Groups 165 Creating Azure Resources and Services 166 Deleting Resources and Services 174 Summary 175 Exam Essentials 175 Review Questions 177 Appendix Answers to Review Questions 179 Chapter 1: Cloud Concepts 180 Chapter 2: Azure Core Services 181 Chapter 3: Azure Core Networking Services 184 Chapter 4: Security, Compliance, Privacy, and Trust 185 Chapter 5: Azure Solutions 189 Chapter 6: Azure Pricing, Service Levels, and Lifecycle 190 Chapter 7: Creating and Managing Azure Resources 192 Index 193 Introduction I currently manage the support and proactive services experience for a portfolio of Microsoft customers, many of whom have either already made a significant transition from on-premises to Azure or are in the process of evaluating a move to Azure. I field questions daily about Azure services, deployment strategies, and proactive services designed to not only educate our customers on Azure and Microsoft 365, but also assist them in planning, deploying, and supporting their Azure and M365 workloads. Continuing technical training is one of the commitments that most Microsoft employees make in addition to the core responsibilities of their roles. As part of that commitment, I completed the AZ-900 Microsoft Azure Fundamentals Certification. The certification helped broaden my background across the entire Azure service portfolio. It also reinforced my understanding that not only highly technical roles benefit from the training and certification—less technical roles benefit from the certification as well. That’s the approach we’ve taken for this book. The content is intended to help you understand the requirements of the AZ-900 Fundamentals exam and prepare to successfully pass the exam. The book does not go deep into Azure but rather focuses on core concepts, services, and resources in Azure that are covered by the exam objectives. The goal of the AZ-900 exam is not to give you a technical depth in Azure, but rather to give you a broad understanding that will enable you to understand the benefits that Azure offers and begin to integrate Azure into your role, whether technical or not. Microsoft AZ-900 Certification Exam Microsoft currently offers 17 certifications at many levels across the Azure cloud offering, ranging from fundamental to very technical. The AZ-900 exam and certification should be the first certification step in your Azure certification path if you do not yet have a fundamental understanding of cloud offerings and Azure in particular. So, whether you are interested in certification in Azure solutions, data, AI, or other areas, your certification path often begins with AZ-900. The following section explores the certification paths and process in more detail. How Do You Become Certified in Azure? As explained earlier, Microsoft currently offers 17 certifications for Azure. Obviously, fundamentals is one certification area, but there are multiple certification paths for Azure administration, app development, data, AI, security, DevOps, IoT, and Azure Stack. These certifications are currently supported by 39 exams. Even if you plan to pursue certification in, for example, Azure IoT development, you should consider AZ-900 Fundamentals to give you a broader understanding of Azure; the knowledge you gain will supplement your understanding of your selected certification. It will also help you leverage and integrate additional Azure workloads in your area of specialization. xx Introduction Becoming certified in Azure is relatively simple. Choose the certification you want to achieve, work through the prescribed learning path for the certification, prepare for the exam, and pass it. Preparation can take many forms, and this book is intended to be your primary one. People have different learning styles, varying backgrounds and experiences, differing amounts of time to study, and so on. So, this book might be one of a handful of resources you use to prepare for the exam. To begin, work through the chapters of this book and develop a strong understanding of the questions and answers offered in each one. Practice does make perfect, so consider working through additional practice test options before taking the exam. Microsoft offers some knowledge checks online within the content at the following URL: You will also find other sample test options online, some for free and some for a fee. All of them provide good additional preparation for the exam. The more questions you work through before taking the exam, the more likely you are to be successful on your first attempt. Types of Exam Questions We have tried to model the sample questions in this book on the types of questions you will see in the official AZ-900 exam. Because the test is online, however, some types of questions are difficult to model in print. The following sections explore the types of questions you will experience in the official, online AZ-900 exam. Multiple Choice These are generally straightforward and come in two variants. The first is a simple question followed by a selection of possible answers. The test question indicates whether there is a single answer or multiple correct answers. Each correct response counts toward your point total. Example (you would choose one answer): 1. Which one of the following provides container orchestration services for containers in Azure? A. Azure Container Instances (ACI) B. Azure Kubernetes C. Azure Logic Apps D. Azure Container Orchestration Services Many multiple-choice questions are scenario based, describing a planning, deployment, or management scenario, followed by a question about the scenario. Example: 2. You are the IT director for Contoso Corporation. Your CIO has asked you to recommend a solution that will enable the development team to quickly deploy VMs for testing applications. The solution must provide flexibility but also result in the lowest cost. Which of the following solutions meets these requirements? (You would choose one or more correct solutions.) Introduction xxi Drag-and-Drop and Select Questions Drag-and-drop questions provide a list of answers that you must match with a corresponding description. For example, the answers might include Disaster Recovery, Fault Tolerance, Low Latency, and Dynamic Scalability. You would drag each of these answers into a box beside the correct description of each. Select questions describe a scenario and you must choose the correct answer from a dropdown list that typically offers three possible answers. Example: 3. Which cloud deployment model is used for Azure VMs and Azure SQL Database instances? (You would choose Infrastructure-as-a-Service from a drop-down list beside Azure VMs and choose Platform-as-a-Service from the drop-down list beside Azure SQL Database.) Yes/No Questions These questions typically include three questions related to a specific topic. You answer by selecting either Yes or No beside each one. Example (for each you would select either Yes or No): 4. Azure resources can access other resources only in the resource group in which they reside. Yes No Deleting a resource group also deletes all resources in the group. Yes No A resource group can include resources from multiple Azure regions. Yes No Text Replacement Questions These questions offer a statement with part of the statement underlined. The statements sometimes include leading sentences providing additional information. The question offers four options, A through D. Three offer alternative text that you would use in place of the underlined text to make it correct. Or, you choose the answer No change is needed if the underlined text is correct. Example: 5. Azure Data Lake Analytics is a PaaS solution that enables you to query data in a data lake and build visualizations without deploying hardware or supporting services. A. is built on SQL Managed Service to provide analytics for large SQL implementations. B. is a component of Azure IoT Central that provides deep analysis of IoT telemetry. C. integrates with Azure DevTest Labs to provide code analysis capabilities. D. No change is needed. In this example, the underlined text makes the statement correct, so the appropriate answer is D (no change is needed). But, if Azure Data Lake Analytics were instead a component of Azure IoT that provided deep analysis of IoT telemetry (it is not), then you would choose B. Achieving AZ-900 Fundamentals Certification The previous sections have explored the concepts surrounding AZ-900 certification. The following sections offer guidance on preparing and registering for the exam, and for taking the exam. xxii Introduction Preparing for the Exam Each person has a unique learning style, and one preparation method is not necessarily the best for everyone. However, the following list of preparation methods will help anyone be successful if used as a whole: ■ Studying: This book obviously provides a great set of resources for learning about Azure fundamentals, but you might prefer a deeper discussion of some topics to help you better understand them. Many online sources are available, but Microsoft’s website is perhaps the best, most authoritative source. When I need to go deeper into a particular topic, I usually open Bing in a browser and use a search similar to the following, specifying where to confine the search and the search terms (replace Service Health with the topic you need to find): site: Azure Service Health. ■ Hands-on experience: You can create a free Azure subscription that provides a monthly credit that you can use to deploy and experiment with Azure resources and services. Although you can’t feasibly experience all of Azure this way (you’re unlikely to deploy Azure Data Lake and begin mining data), but you can at least explore basic concepts and resources such as VMs, virtual networking, and so on. Equally important, you can gain understanding of and experience with the Azure portal and other management tools covered by the AZ-900 exam. ■ Sample tests: The test questions in this book are designed to cover the exam objectives outlined by Microsoft for the AZ-900 exam. However, it’s a good idea to use additional sample test resources to prepare for the test. Not only does this expose you to a broader base of questions, but it helps avoid the “memorize the question and answer” issue that often arises from using a single sample source. Registering for the Exam When you feel confident in your ability to pass the exam, your next step is to register for the exam. To do so, navigate to exams/az-900. There you will find information about the exam and links to register for the exam with a testing provider. The test might be administered in person at a testing site or remotely. In either case, you will need to provide photo identification when registering and provide that same identification when you take the exam. You will not be able to use any electronic devices or other resources during the exam. If taking the exam remotely, your device must have a camera through which a proctor can watch you throughout. Taking the Exam Unless you already have a strong background in Azure and taking the AZ-900 exam is a formality, I recommend you set aside a few days to prepare for the exam even after you complete your training and study. Spend several hours reviewing the material and the practice questions. Ensure that you are well rested the day of the exam. When you are taking the exam, carefully read through each question in full, even if you think you know the intent of the question from samples that you have seen. Be deliberate about each question. As you review the possible answers, consider that one answer might provide a more Introduction xxiii complete answer than another, and choose the one that most completely suits the question. Think carefully about the scenario outlined by each question when choosing your answer. Here is a summary of points to help you be successful: ■ Arrive or go online early to give yourself time to review content and mentally prepare for the exam. ■ As emphasized previously, read each question carefully and don’t jump to a snap answer. Be deliberate about reading each question and choosing the correct answer. ■ Answer all questions as you go along in case you run out of time. You will likely have time when you finish to go back through your answers and adjust as needed any answers you were unsure of on the first pass. ■ Sometimes the additional information included in a question is relevant to the answer, but in others it only colors the scenario. Know that there are no trick questions. Read carefully to understand the intent of the question. ■ If you are unsure of the correct answer, eliminate the answers that you know are incorrect to narrow the possibilities. Who Should Read This Book? IT administrators and other deeply technical roles are not the only ones who can benefit from Azure fundamentals training. If you are in technical sales, project management, or other less technical roles, understanding Azure and its services can help you in your role as well. That’s why we have designed this book and its content to provide broad coverage of Azure fundamentals at an introductory level rather than a deep technical level. The book is appropriate for anyone who wants to understand Azure in a broad sense and prepare for the AZ-900 exam, even if you are not highly technical. What’s Included in the Book? This book consists of seven chapters plus supplementary information: a glossary, this introduction, flashcards, and the assessment test after the introduction. The chapters are organized as follows: ■ Chapter 1, “Cloud Concepts,” explores the basic concepts of cloud computing to lay the foundation for the rest of the book. Chapter 1 covers categories of cloud computing, the financial benefits of cloud computing, and the various cloud models available with Microsoft Azure. ■ Chapter 2, “Azure Core Services,” explores the core services available with Azure, including key concepts such as subscriptions and billing, tenants, resources, and resource management. The chapter begins the exploration of key Azure services, including virtual machines, storage, and data services. ■ Chapter 3, “Azure Core Networking Services,” begins with an explanation of basic networking concepts to create a framework for the discussion of Azure-specific networking services. The chapter explores virtual networks, load balancers, VPN gateways, and content delivery networks. xxiv Introduction ■ Chapter 4, “Security, Compliance, Privacy, and Trust,” covers concepts, services, and solutions in Azure related to security, , compliance, privacy, and trust. Topics covered include Azure network security resources, authentication and authorization, and key Azure security services such as Security Center, Key Vault, and others. The chapter also covers governance methodologies, compliance resources, monitoring and reporting, privacy and compliance topics, and government implementations of Azure for the United States and China. ■ Chapter 5, “Azure Solutions,” covers services in Azure for Internet of Things (IoT), big data and analytics, artificial intelligence (AI), serverless computing, and DevOps. ■ Chapter 6, “Azure Pricing, Service Levels, and Lifecycle,” helps you understand subscriptions, ways to purchase Azure services, and how to estimate and manage costs in Azure. Pricing tools including the TCO Calculator and Pricing Calculator are explored, as are service level agreements (SLAs), ways to improve SLAs (and the potential effect of SLAs on cost), and other ways to manage cost in Azure. ■ Chapter 7, “Creating and Managing Azure Resources,” begins with an exploration of the tools you can use to create and manage Azure resources, including the Azure portal, PowerShell, the Azure CLI, the Azure Cloud Shell, and the Azure Mobile App. The chapter finishes with sections that step you through the process of creating several types of Azure resources. Each chapter begins with a list of the objectives that are covered in that chapter. The book doesn’t cover the objectives in order. Thus, you shouldn’t be alarmed at some of the odd ordering of the objectives within the book. At the end of each chapter, you’ll find a couple of elements you can use to prepare for the exam: Exam Essentials This section summarizes important information that was covered in the chapter. You should be able to perform each of the tasks or convey the information requested. Review Questions Each chapter concludes with review questions. You should answer these questions and check your answers against the ones provided after the questions. If you can’t answer at least 80 percent of these questions correctly, go back and review the chapter, or at least those sections that seem to be giving you difficulty. The review questions, assessment test, and other testing elements included in this book are not derived from the exam questions, so don’t memorize the answers to these questions and assume that doing so will enable you to pass the exam. You should learn the underlying topic, as described in the text of the book. This will let you answer the questions provided with this book and pass the exam. Learning the underlying topic is also the approach that will serve you best in the workplace—the ultimate goal of a certification. To get the most out of this book, you should read each chapter from start to finish and then check your memory and understanding with the chapter-end elements. Even if you’re already familiar with a topic, you should skim the chapter; Azure is complex enough that there are often multiple ways to accomplish a task, so you may learn something even if you’re already competent in an area. Introduction xxv Recommended Home Lab Setup Microsoft Azure is a cloud-based offering, so you really don’t need a home lab setup to learn about Azure. Instead, you need only a computer with a connection to the Internet and an Azure subscription for experimentation. As described in Chapter 7, you can create a free subscription in Azure and use a monthly credit included with that free subscription to work in Azure for up to a year without incurring any cost. How to Contact Sybex We want to ensure that you have the best resources and most up-to-date information as you take your Azure certification journey. On a periodic basis, visit Interactive Online Learning Environment and Test Bank We’ve put together some great online tools to help you pass the AZ-900 exam. The interactive online learning environment that accompanies Microsoft Certified Azure Fundamentals Study Guide: Exam AZ-900 provides a test bank and study tools to help you prepare for the exam. By using these tools, you can dramatically increase your chances of passing the exam on your first try. The online section includes the following: Sample Tests Many practice questions are provided throughout this book and online, including the questions in the assessment test, which you’ll find at the end of this introduction, and the review questions at the end of each chapter. In addition, we provide two bonus practice exams. Use these practice questions to test your knowledge of the study guide material. The online test bank runs on multiple devices. Flashcards The online text bank includes 134 flashcards specifically written to test your knowledge. Don’t get discouraged if you don’t ace your way through them at first. The purpose of the flashcards is to help ensure that you’re ready for the exam. And no worries—armed with the review questions, practice exams, and flashcards, you’ll be more than prepared when exam day comes! Questions are provided in digital flashcard format (a question followed by a single correct answer). You can use the flashcards to reinforce your learning and provide last-minute test prep before the exam. Other Study Tools A glossary of key terms from this book and their definitions are available as a fully searchable PDF. Go to free access after activation to the interactive online learning environment and test bank with study tools. xxvi Introduction AZ-900 Exam Objectives Microsoft Certified Azure Fundamentals Study Guide: Exam AZ-900 has been written to cover every exam objective at a level appropriate to its exam weighting. The following table provides a breakdown of this book’s exam coverage, showing you the weight of each section and the chapter where each objective or subobjective is covered: Subject Area % of Exam Describe cloud concepts 20–25% Describe core Azure services 15–20% Describe core solutions and management tools on Azure 10–15% Describe general security and network security features 10–15% Describe identity, governance, privacy, and compliance features 20–25% Describe Azure cost management and service level agreements 10–15% Total 100% Domain 1: Describe Cloud Concepts Subdomain 1a: Identify the benefits and considerations of using cloud services Exam Objective Chapter 1-1 Identify the benefits of cloud computing, such as High Availability, Scalability, Elasticity, Agility, and Disaster Recovery 1 1-2 Identify the differences between Capital Expenditure (CapEx) and Operational Expenditure (OpEx) 1 1-3 Describe the consumption-based model 1 Introduction xxvii Subdomain 1b: Describe the differences between categories of cloud services Exam Objective Chapter 1-4 Describe the shared responsibility model 1 1-5 Describe Infrastructure-as-a-Service (IaaS) 1 1-6 Describe Platform-as-a-Service (PaaS) 1 1-7 Describe serverless computing 1 1-8 Describe Software-as-a-Service (SaaS) 1 1-9 Identify a service type based on a use case 1 Subdomain 1c: Describe the differences between types of cloud computing Exam Objective Chapter 1-10 Define cloud computing 1 1-11 Describe Public cloud 1 1-12 Describe Private cloud 1 1-13 Describe Hybrid cloud 1 1-14 Compare and contrast the three types of cloud computing 1 Domain 2: Describe Core Azure Services Subdomain 2a: Describe the core Azure architectural components Exam Objective Chapter 2-1 Describe the benefits and usage of Regions and Region Pairs 2 2-2 Describe the benefits and usage of Availability Zones 2 2-3 Describe the benefits and usage of Resource Groups 2 xxviii Introduction 2-4 Describe the benefits and usage of Subscriptions 2 2-5 Describe the benefits and usage of Management Groups 2 2-6 Describe the benefits and usage of Azure Resource Manager 2 2-7 Explain Azure resources 2 Subdomain 2b: Describe core resources available in Azure Exam Objective Chapter 2-8 Describe the benefits and usage of Virtual Machines, Azure App Service, Azure Container Instances (ACI), Azure Kubernetes Service (AKS), and Windows Virtual Desktop 2 2-9 Describe the benefits and usage of Virtual Networks, VPN Gateway, Virtual Network peering, and ExpressRoute 3 2-10 Describe the benefits and usage of Container (Blob) Storage, Disk Storage, File Storage, and storage tiers 2 2-11 Describe the benefits and usage of Cosmos DB, Azure SQL Database, Azure Database for MySQL, Azure Database for PostgreSQL, and SQL Managed Instance 2 2-12 Describe the benefits and usage of Azure Marketplace 2 Domain 3: Describe Core Solutions and Management Tools on Azure Subdomain 3a: Describe core solutions available in Azure Exam Objective Chapter 3-1 Describe the benefits and usage of Internet of Things (IoT) Hub, IoT Central, and Azure Sphere 5 3-2 Describe the benefits and usage of Azure Synapse Analytics, HDInsight, and Azure Databricks 5 3-3 Describe the benefits and usage of Azure Machine Learning, Cognitive Services, and Azure Bot Service 5 Introduction xxix 3-4 Describe the benefits and usage of serverless computing solutions that include Azure Functions and Logic Apps 5 3-5 Describe the benefits and usage of Azure DevOps, GitHub, GitHub Actions, and Azure DevTest Labs 5 Subdomain 3b: Describe Azure management tools Exam Objective Chapter 3-6 Describe the functionality and usage of the Azure Portal, Azure PowerShell, Azure CLI, Cloud Shell, and Azure Mobile App 7 3-7 Describe the functionality and usage of Azure Advisor 7 3-8 Describe the functionality and usage of Azure Resource Manager (ARM) templates 7 3-9 Describe the functionality and usage of Azure Monitor 7 3-10 Describe the functionality and usage of Azure Service Health 7 Domain 4: Describe General Security and Network Security Features Subdomain 4a: Describe Azure security features Exam Objective Chapter 4-1 Describe the basic features of Azure Security Center, including policy compliance, security alerts, secure score, and resource hygiene 4 4-2 Describe the functionality and usage of Key Vault 4 4-3 Describe the functionality and usage of Azure Sentinel 4 4-4 Describe the functionality and usage of Azure Dedicated Hosts 4 xxx Introduction Subdomain 4b: Describe Azure network security Exam Objective Chapter 4-5 Describe the concept of defense in depth 4 4-6 Describe the functionality and usage of Network Security Groups (NSG) 4 4-7 Describe the functionality and usage of Azure Firewall 4 4-8 Describe the functionality and usage of Azure DDoS Protection 4 Domain 5: Describe Identity, Governance, Privacy,