Microsoft AZ-900 Practice Test - Questions Answers, Page 10

When planning to migrate a public website to Azure, you must plan to pay monthly usage costs. This is because Azure uses the pay-as-you-go model.

Azure Cosmos DB is an example of a platform as a service (PaaS) cloud database provider.

References:

https://docs.microsoft.com/en-us/azure/cosmos-db/database-security

You can move a VM and its associated resources to a different subscription by using the Azure portal. Moving between subscriptions can be handy if you originally created a VM in a personal subscription and now want to move it to your company's subscription to continue your work. You do not need to start the VM in order to move it and it should continue to run during the move.

References:

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/move-vm

Box 1: No

Resource groups are logical containers for Azure resources. You do not pay for resource groups.

Box 2: No

Data ingress over a VPN is data ‘coming in’ to Azure over the VPN. You are not charged data transfer costs for data ingress.

Box 3: Yes

Data egress over a VPN is data ‘going out’ of Azure over the VPN. You are charged for data egress.

References:

https://docs.microsoft.com/en-us/azure/azure-resource-manager/manage-resource-groups-portal

https://azure.microsoft.com/en-us/pricing/details/bandwidth/

Availability zones expand the level of control you have to maintain the availability of the applications and data on your VMs. Availability Zones are unique physical locations within an Azure region. Each zone is made up of one or more datacenters equipped with independent power, cooling, and networking. To ensure resiliency, there are a minimum of three separate zones in all enabled regions. The physical separation of Availability Zones within a region protects applications and data from datacenter failures.

With Availability Zones, Azure offers industry best 99.99% VM uptime SLA. By architecting your solutions to use replicated VMs in zones, you can protect your applications and data from the loss of a datacenter. If one zone is compromised, then replicated apps and data are instantly available in another zone.

References:

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/manage-availability

Azure automatically routes traffic between subnets in a virtual network. Therefore, all virtual machines in a virtual network can connect to the other virtual machines in the same virtual network. Even if the virtual machines are on separate subnets within the virtual network, they can still communicate with each other.

To ensure that a virtual machine cannot connect to the other virtual machines, the virtual machine must be deployed to a separate virtual network.

References:

https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-udr-overview

A resource group is a logical container for Azure resources. Resource groups make the management of Azure resources easier.

With a resource group, you can allow a user to manage all resources in the resource group, such as virtual machines, websites, and subnets. The permissions you apply to the resource group apply to all resources contained in the resource group.

Reference:

https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/overview#resource-groups

https://docs.microsoft.com/en-us/azure/role-based-access-control/overview

Azure storage offers different access tiers: hot, cool and archive.

The archive access tier has the lowest storage cost. But it has higher data retrieval costs compared to the hot and cool tiers. Data in the archive tier can take several hours to retrieve.

While a blob is in archive storage, the blob data is offline and can't be read, overwritten, or modified. To read or download a blob in archive, you must first rehydrate it to an online tier.

Example usage scenarios for the archive access tier include:

Long-term backup, secondary backup, and archival datasets

Original (raw) data that must be preserved, even after it has been processed into final usable form. Compliance and archival data that needs to be stored for a long time and is hardly ever accessed.

References:

https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-storage-tiers?tabs=azure-portal#archive-access-tier

Azure Resource Manager templates provides a common platform for deploying objects to a cloud infrastructure and for implementing consistency across the Azure environment.

Azure policies are used to define rules for what can be deployed and how it should be deployed. Whilst this can help in ensuring consistency, Azure policies do not provide the common platform for deploying objects to a cloud infrastructure.

References:

https://docs.microsoft.com/en-us/azure/governance/policy/overview