Correct Answer: D

Azure Front Door enables you to define, manage, and monitor the global routing for your web traffic by optimizing for best performance and instant global failover for high availability. With Front Door, you can transform your global (multi-region) consumer and enterprise applications into robust, high-performance personalized modern applications, APIs, and content that reaches a global audience with Azure.

Front Door works at Layer 7 or HTTP/HTTPS layer and uses anycast protocol with split TCP and Microsoft's global network for improving global connectivity.

Incorrect Answers:

A. AKS ingress controller

An ingress controller is a piece of software that provides reverse proxy, configurable traffic routing, and TLS termination for Kubernetes services.

B. Azure Load Balancer

Azure Load Balancer operates at layer 4 of the Open Systems Interconnection (OSI) model. It's the single point of contact for clients. Load balancer distributes inbound flows that arrive at the load balancer's front end to backend pool instances.

C. Azure Traffic Manager

Azure Traffic Manager uses DNS (layer 3) to shape traffic. SSL works at Layer 6.

Azure Traffic Manager can direct customers to their closest AKS cluster and application instance. For the best performance and redundancy, direct all application traffic through Traffic Manager before it goes to your AKS cluster.

Reference:

https://docs.microsoft.com/en-us/azure/frontdoor/front-door-overview

Correct Answer: C

When you back up a key vault object, such as a secret, key, or certificate, the backup operation will download the object as an encrypted blob. This blob can't be decrypted outside of Azure. To get usable data from this blob, you must restore the blob into a key vault within the same Azure subscription and Azure geography.

Incorrect Answers:

A. KeyVault1 only

You can restore to other key vaults in same Azure subscription and geography.

B. the same region only

You can restore to any region within same geography.

D. any region worldwide

You must restore within the same geography.

Reference:

https://docs.microsoft.com/en-us/azure/key-vault/general/backup

Correct Answer: C

Lightweight Directory Access Protocol (LDAP) is an application protocol for working with various directory services. Directory services, such as Active Directory, store user and account information, and security information like passwords. The service then allows the information to be shared with other devices on the network. Azure Active Directory (Azure AD) supports this pattern via Azure AD Domain Services (AD DS). It allows organizations that are adopting a cloud-first strategy to modernize their environment by moving off their on-premises LDAP resources to the cloud.

Incorrect Answers:

A. Azure AD Application Proxy

Azure Active Directory's Application Proxy provides secure remote access to on-premises web applications.

B. an Azure VPN gateway

A VPN gateway is a specific type of virtual network gateway that is used to send encrypted traffic between an Azure virtual network and an on-premises location over the public Internet.

D. the Active Directory Domain Services role on a virtual machine

This is basically setting up Active directory in a VM. The on-premise active directory already syncs with Azure AD.

Reference:

https://docs.microsoft.com/en-us/azure/active-directory-domain-services/overview

https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/auth-ldap#use-when

Correct Answer: A

The Advanced Message Queueing Protocol 1.0 is a standardized framing and transfer protocol for asynchronously, securely, and reliably transferring messages between two parties. It is the primary protocol of Azure Service Bus Messaging and Azure Event Hubs.

Incorrect Answres:

B. Reduce the retention period of the event hub

Changing the retention period would not reduce the overhead.

C. Replace the event hub with an Azure Service Bus instance

Azure event hub has a low latency compared to Azure Service Bus.

D. Configure the application to send events by using the HTTPS protocol

Overhead increases with HTTPS compared to HTTP.

Reference:

https://docs.microsoft.com/en-us/azure/service-bus-messaging/service-bus-amqp-protocol-guide

Correct Answer: A

Yes - Because we are using an APIM, deployed to a VNET but configured to be "External"

Reference:

https://docs.microsoft.com/en-us/azure/api-management/api-management-using-with-vnet

Correct Answer: A

Yes - Because the APIM is deployed in the same vNET as VM1 just in a different subnet. Communication between subnets are enabled by default and there is no mention of otherwise.

Reference:

https://docs.microsoft.com/en-us/azure/api-management/api-management-using-with-vnet

Correct Answer: B

No VPN required because the APIM is accessible from the internet by virtue of it being configured as "External"

Reference:

https://docs.microsoft.com/en-us/azure/api-management/api-management-using-with-vnet

Correct Answer: A

Azure Logic Apps and Azure Functions are serverless services. Use Azure Logic Apps to define the workflow and Azure Functions to execute scripts.

When you want to run code that performs a specific job in your logic apps, you can create your own function by using Azure Functions. This service helps you create Node.js, C#, and F# functions so you don't have to build a complete app or infrastructure to run code. You can also call logic apps from inside Azure functions. Azure Functions provides serverless computing in the cloud and is useful for performing tasks such as these examples:

◉ Extend your logic app's behavior with functions in Node.js or C#.

◉ Perform calculations in your logic app workflow.

◉ Apply advanced formatting or compute fields in your logic app workflows.

Incorrect Answers:

B. Azure Pipelines and Azure Service Fabric

Azure Pipelines are used for CI/CD integration.

C. Azure Logic Apps and Azure Event Grid

We need a service that runs the scripts.

D. Azure Functions and Azure Batch

Use Azure Batch to run large-scale parallel and high-performance computing (HPC) batch jobs efficiently in Azure. The requirement is to run simple scripts.

Reference:

https://docs.microsoft.com/en-us/azure/logic-apps/logic-apps-azure-functions

Correct Answer: A

To keep up with application demands in Azure Kubernetes Service (AKS), you may need to adjust the number of nodes that run your workloads. The cluster autoscaler component can watch for pods in your cluster that can't be scheduled because of resource constraints. When issues are detected, the number of nodes in a node pool is increased to meet the application demand. Nodes are also regularly checked for a lack of running pods, with the number of nodes then decreased as needed. This ability to automatically scale up or down the number of nodes in your AKS cluster lets you run an efficient, cost-effective cluster.

To adjust to changing application demands, such as between the workday and evening or on a weekend, clusters often need a way to automatically scale. AKS clusters can scale in one of two ways:

The cluster autoscaler watches for pods that can't be scheduled on nodes because of resource constraints. The cluster then automatically increases the number of nodes.

The horizontal pod autoscaler uses the Metrics Server in a Kubernetes cluster to monitor the resource demand of pods. If an application needs more resources, the number of pods is automatically increased to meet the demand.

Incorrect Answers:

D. Virtual nodes with Virtual Kubelet ACI

Virtual nodes are only supported with Linux pods and nodes

Reference:

https://docs.microsoft.com/en-us/azure/aks/cluster-autoscaler

https://docs.microsoft.com/en-us/azure/aks/concepts-scale

Correct Answer: C

You can reduce your total Azure Virtual Desktop deployment cost by scaling your virtual machines (VMs). This means shutting down and deallocating session host VMs during off-peak usage hours, then turning them back on and reallocating them during peak hours. The scaling tool built with the Azure Automation account and Azure Logic App that automatically scales session host VMs in your Azure Virtual Desktop environment.

Incorrect Answers:

A. Microsoft Intune

Microsoft Intune is a cloud-based service that focuses on mobile device management (MDM) and mobile application management (MAM).

B. a Windows Virtual Desktop automation task

Not a valid option, there is no Azure Virtual Desktop automation task.

D. Azure Service Health

Azure Service Health is a suite of experiences that provide personalized guidance and support when issues in Azure services are or may affect you in the future.

Reference:

https://docs.microsoft.com/en-us/azure/virtual-desktop/set-up-scaling-script

https://www.ciraltos.com/automatically-start-and-stop-wvd-vms-with-azure-automation