N-Y-N.

Sql server 2019 installed on VM --> IaaS

Azure SQL Database-->PaaS

Azure Cosmos DB-->PaaS

The key is "update managed by Azure". With IaaS, it's your responsibility to update your MS SQL instance. So PaaS is correct.

Azure App Service and Azure SQL databases are examples of Azure PaaS solutions. Therefore, this solution does meet the goal.

In SaaS, the user has the responsibility only to insert/configure data.

From https://learn.microsoft.com/en-us/azure/storage/files/storage-files-introduction:

"Fully managed. Azure file shares can be created without the need to manage hardware or an OS. This means you don't have to deal with patching the server OS with critical security upgrades or replacing faulty hard disks."

--> So Azure Files is PaaS.

--> Box1 is NO.

DNS Server (Either owned or Azure DNS) = Networking = IaaS

https://azure.microsoft.com/en-gb/overview/what-is-azure/iaas/#products

Networking > Azure DNS.

--> Box2 is NO.

Microsoft Intune : we only put our data and devices > SaaS.

--> Box3 is YES.

Virtualization is the key to cloud computing, since it is the enabling technology allowing the creation of an intelligent abstraction layer which hides the complexity of underlying hardware or software.

Remember SPRAGM!!

Strategy - Plan - Ready - Adopt - Govern - Manage

Box 1: No -

You cannot add physical servers to the public cloud. You can only deploy virtual servers in the public cloud. You can extend a private cloud by deploying virtual servers in a public cloud. This would create a hybrid cloud.

Box 2: No -

A private cloud exists in cyberspace and is accessed via the internet.

Box 3: Yes.

Reference:

https://azure.microsoft.com/en-gb/overview/what-are-private-public-hybrid-clouds/

A resource group can be used to scope access control for administrative actions. To manage a resource group, you can assign Azure Policies, Azure roles, or resource locks.

A. Correct, because Availability Zones represent multiple Data Centers (up to 3) inside a Region, so that if a DC fail, another DC supply the services in a HA environment.