HOTSPOT -
You need to create a new user for an Azure subscription.
What should you use? To answer, select the service in the answer area.
NOTE: Each correct match is worth one point.
Show Answer
Correct Answer: Azure Active Directory
Explanation: Users are created in Azure Active Directory (now Microsoft Entra ID). Subscriptions are used to assign roles and access to existing users, not to create user identities.
Question 96
What should you use to track the costs of Azure resources?
A. Azure Quickstart templates
B. tags
C. budgets
D. usage and quotas
Show Answer
Correct Answer: C
Explanation: To track the costs of Azure resources, Azure Budgets (part of Azure Cost Management) are the correct tool. Budgets allow you to monitor actual spending over time, set cost thresholds, apply filters (such as subscription, resource group, or tags), and receive alerts when spending approaches or exceeds defined limits. Tags help categorize resources for analysis, but they do not themselves track costs. Usage and quotas focus on consumption limits, not financial tracking, and Quickstart templates are unrelated to cost management.
Question 97
Your company has an Azure subscription that contains several resources.
You need to identify which department is responsible for the cost of each resource.
What should you use?
A. budgets
B. alerts
C. tags
Show Answer
Correct Answer: C
Explanation: Tags allow you to assign name–value metadata (such as Department or CostCenter) directly to Azure resources. Azure Cost Management can then group and report costs based on these tags, making it possible to identify which department is responsible for the cost of each resource. Budgets and alerts help monitor or control spending but do not identify ownership per resource.
Question 98
What should you use to prevent traffic from an Azure virtual network from being routed to an Azure Storage account via the internet?
A. a network security group (NSG)
B. a public endpoint
C. Azure VPN Gateway
D. a service endpoint
Show Answer
Correct Answer: D
Explanation: To prevent traffic from an Azure virtual network to an Azure Storage account from traversing the public internet, you must change how the traffic is routed. Virtual Network service endpoints ensure that traffic from the VNet to Azure Storage stays on the Azure backbone network instead of the internet. Network Security Groups only filter traffic; they do not alter routing paths. Therefore, a service endpoint is the correct choice.
Question 99
HOTSPOT -
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: No
No
Yes
Explanation: Archive tier cannot be set at the storage account level (only hot/cool defaults; archive is blob-level).
Cool is not the lowest storage cost; Archive has the lowest storage cost.
The storage account access tier (hot/cool default) can be changed after blobs are uploaded.
Question 100
You plan to reduce ongoing Azure expenditures.
You need to identify which factors affect the costs of a resource.
Which three factors should you identify? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
A. the volume of outbound data
B. the volume of inbound data
C. the service tier
D. the Azure region
E. the type of processed data
Show Answer
Correct Answer: A, C, D
Explanation: Azure resource costs are influenced by how much outbound data is transferred (egress is billed), the selected service tier (higher tiers cost more), and the Azure region (pricing varies by region). Inbound data transfer is generally free, and Azure does not price resources based on the type of data processed.
Question 101
HOTSPOT
-
Select the answer that correctly completes the sentence.
Show Answer
Correct Answer: in a private cloud
Explanation: A private cloud allows an organization to host and manage its own infrastructure using cloud technologies, so the organization operates the environment without requiring a traditional, separate data center model as described in the question.
Question 102
HOTSPOT -
Select the answer that correctly completes the sentence.
Hot Area:
Explanation: Azure Firewall NAT rules publish an internal (private) server to the internet by translating a public IP and port to the private IP and port. This enables inbound internet access to resources in a virtual network.
Question 103
HOTSPOT -
Select the answer that correctly completes the sentence.
Hot Area:
Show Answer
Correct Answer: Authentication
Explanation: Authentication is the process of verifying and establishing the identity of a user or service before it can access a resource.
Question 104
HOTSPOT -
To complete the sentence, select the appropriate option in the answer area.
Hot Area:
Show Answer
Correct Answer: public preview
Explanation: Azure services in public preview are accessible to all Azure customers with a subscription, unlike private preview (limited access), development (not released), or EA-only availability.
$19
Get all 428 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.
