Microsoft Practice Questions, Discussions & Exam Topics by our Authors
DRAG DROP -Match the cloud computing benefits to the appropriate descriptions.To answer, drag the appropriate benefit from the column on the left to its description on the right. Each benefit may be used once, ...
Author: Emma · Last updated Jun 25, 2026
Which cloud computing benefit provides continuous user access to a cloud-based application with mini...
The cloud computing benefit that provides continuous user access to a cloud-based application with minimal downtime is D) high availability.
Explanation:
- High Availability (D): This refers to the ability of a system or application to remain operational and accessible with minimal downtime, ensuring that services are always available for users. It is achieved through redundancy, failover mechanisms, and geographically distributed resources. This ensures that if one component fails, others can take over, keeping the application running without significant disruptions.
- Agility (A): Agility refers to the ability to quickly develop, deploy, and iterate applications. While it allows for rapid changes and flexibility, it does not directly ensure continuous access or minimal downtime. It focuses more on speed rather than uptime or reliability.
- Scalability (B): Scalability allows a system to handle ...
Author: Madison · Last updated Jun 25, 2026
You need to identify the type of failure for which an Azure Availability Zone can be used to protect acce...
To determine the appropriate type of failure that an Azure Availability Zone can protect against, it's important to understand what Availability Zones (AZs) are and how they function within Azure's infrastructure.
Azure Availability Zones Overview:
Azure Availability Zones are unique physical locations within an Azure region. Each Availability Zone consists of one or more data centers equipped with independent power, cooling, and networking. By distributing applications across multiple Availability Zones, you can improve the high availability and fault tolerance of your applications and services. Availability Zones are designed to protect against local failures (e.g., hardware issues, network failures) within a single data center.
Analysis of Each Option:
1. A) Physical Server Failure:
- Explanation: Availability Zones are designed to mitigate failures at a larger infrastructure level, not just individual hardware components (like a single server). While a physical server failure may occur within a data center, Availability Zones are intended to provide protection from failures at the data center or regional level, rather than the failure of an individual server.
- Rejection: Availability Zones do not provide protection for server-level failures; they handle larger-scale failures (data center or region-level).
2. B) Azure Region Failure:
- Explanation: Azure Availability Zones cannot protect against an entire Azure region failure. Availability Zones are part of an Azure region and are designed to protect against localized failures within a region, such as a data center failure. However, if the entire region itself goes down (due to a catastrophic failure), Availability Zones within that r...
Author: Noah · Last updated Jun 25, 2026
SNAPSHOT -You plan to extend your company's network to Azure.The network contains a VPN appliance that uses an IP address of 131.107.200.1.You need to create an Azure resource that defines the VPN appliance in Azure.Which Azure ...
Author: Ishaan · Last updated Jun 25, 2026
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You plan to deploy several Azure virtual machines.Yo...
Scenario and Explanation:
The goal is to ensure that the services running on Azure virtual machines (VMs) remain available in case of a failure of a single data center. This requires a solution that can provide high availability in the event of a localized failure in one data center.
Analyzing the Solution (Deploying VMs to Two or More Resource Groups):
- Azure Resource Groups are logical containers that organize resources in Azure. However, they are not tied to specific data centers or Availability Zones. Resource groups help organize resources for management and operational purposes, but they do not offer fault tolerance or ensure high availability in the event of a data center failure.
- A data center failure would affect all resources within that data center, regardless of which resource group they are in. Therefore, deploying VMs to different resource groups does not inherently provide high availability across data cent...
Author: Max · Last updated Jun 25, 2026
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You plan to deploy several Azure virtual ...
Scenario and Explanation:
The goal is to ensure that the services running on Azure virtual machines (VMs) remain available in case a single data center fails. A scale set is a feature in Azure that automatically manages the deployment and scaling of a set of identical VMs. The solution to this goal requires ensuring high availability in case of a data center failure.
Analyzing the Solution (Deploying VMs to a Scale Set):
- Azure Virtual Machine Scale Sets (VMSS) allow you to deploy and manage a group of identical VMs in a uniform manner.
- However, while VMSS can scale VMs automatically and manage their distribution across multiple fault domains, it does not inherently distribute VMs across multiple Availability Zones or data centers. By default, VMs in a scale set are distributed across fault domains (which are essentially logical partitions of the hardware), but they might still all be located in the same data center.
- In order to protect against data center failures, the VMs in the scale set would need to be spread across multiple A...
Author: Rahul · Last updated Jun 25, 2026
SNAPSHOT -For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Ea...
Author: Elizabeth · Last updated Jun 25, 2026
This question requires that you evaluate the underlined text to determine if it is correct.Resource groups provide organizations with the ability to manage the compliance of Azure resources across multiple subscriptions.Instructions: Review the underlined text. If it makes the statement cor...
The statement "Resource groups provide organizations with the ability to manage the compliance of Azure resources across multiple subscriptions" is incorrect.
The correct answer is B) Management groups.
Explanation:
- A) No change is needed is incorrect because resource groups in Azure do not offer management capabilities across multiple subscriptions for compliance. They are used to manage resources within a single subscription.
- B) Management groups is correct because Azure Management Groups provide a way to organize and manage resources across multiple subscriptions, including compliance, ...
Author: Liam123 · Last updated Jun 25, 2026
Your company plans to migrate to Azure.The company has several departments. All the Azure resources used by each department will be managed by a department administrator.What are two possible techniques to segment Azure for the departme...
To segment Azure for the departments in your company, the two correct techniques are A) multiple subscriptions and D) multiple resource groups.
Explanation:
- A) Multiple subscriptions is correct because using multiple subscriptions allows the company to isolate the resources for each department, enabling different department administrators to manage their own resources. It also provides more flexibility in billing and governance. Each department can have a subscription with its own set of permissions, roles, and access control.
- D) Multiple resource groups is correct because resource groups allow for logical grouping of resources in Azure. You can create a separate resource group for each department to segment resources, and the department administrators can manage access and permissions within those resource groups. Resource groups are less isolated than...
Author: Elizabeth · Last updated Jun 25, 2026
SNAPSHOT -For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Ea...
Author: Emma · Last updated Jun 25, 2026
SNAPSHOT -To complete the sentence, select the appropriate option in the answer area.Hot Area:
Author: RadiantPhoenixX · Last updated Jun 25, 2026
You have an Azure environment that contains multiple Azure virtual machines.You plan to implement a solution that enables the client computers on your on-premises network to communicate to the Azure virtual machines.You need to recommend which Azure resources must be created for the planned solution.Which two Azure resources...
To enable client computers on an on-premises network to communicate with Azure virtual machines, the two necessary Azure resources are A) a virtual network gateway and D) a virtual network.
Explanation:
- A) A virtual network gateway is correct because it facilitates VPN connectivity between on-premises networks and Azure virtual networks. The virtual network gateway enables secure communication between the on-premises network and Azure resources like virtual machines. This is essential for establishing a connection to Azure from an on-premises environment.
- D) A virtual network is correct because Azure Virtual Network (VNet) provides the foundational network in which Azure virtual machines are hosted. To enable communication between client computers and virtual machines, both must be connected to the same or peered virtual network.
Why other options are rejected:
- B) A load balancer is not required ...
Author: Emily · Last updated Jun 25, 2026
You attempt to create several managed Microsoft SQL Server instances in an Azure environment and receive a message that you must increase your Azur...
To increase your Azure subscription limits, you would need to request a limit increase through Azure Support. Here’s a breakdown of each option:
A) Create a service health alert
Creating a service health alert is used for monitoring and notifying you about the health of Azure services in your region. This does not allow you to increase resource limits. It’s helpful for detecting outages or issues but not for increasing your subscription limits.
B) Upgrade your support plan
Upgrading your support plan can give you access to more advanced Azure support options, but upgrading alone doesn’t automatically increase your subscription limits. You would still need to submit a request through Azure support to have your limits increased, regardless of your support plan.
C) Modify an Azure policy
Azure policie...
Author: Kai · Last updated Jun 25, 2026
SNAPSHOT -For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Ea...
Author: Zain · Last updated Jun 25, 2026
SNAPSHOT -For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Ea...
Author: Olivia Johnson · Last updated Jun 25, 2026
SNAPSHOT -You plan to create an Azure virtual machine.You need to identify which storage service must be used to store the unmanaged data disks of the virtual machine.What should you i...
Author: Liam · Last updated Jun 25, 2026
Your company plans to move several servers to Azure.The company's compliance policy states that a server named FinServer must be on a separate network segment.You are evaluating which Azure services can be u...
Analyzing the options:
A) A resource group for FinServer and another resource group for all the other servers
Resource groups are primarily a management tool in Azure. They help organize resources, control access, and manage resources for deployment, but they do not define network boundaries. Putting servers in different resource groups will not create separate network segments or enforce network isolation, so this option doesn't meet the compliance policy of having FinServer on a separate network segment.
B) A virtual network for FinServer and another virtual network for all the other servers
This option directly creates separate virtual networks for FinServer and all the other servers. Virtual networks (VNets) in Azure define logical isolation and segment resources within Azure. By placing FinServer in a separate virtual network, it will be on a different network segment as required by the compliance policy. This is the most appropriate solution for isolating the network traffic of FinServer from the other servers.
C) A VPN for FinServer and a virtual network gateway f...
Author: Victoria · Last updated Jun 25, 2026
You plan to map a network drive from several computers that run Windows 10 to Azure Storage.You need to create a storage solution in ...
To map a network drive from several Windows 10 computers to Azure Storage, the most suitable option is C) a File service in a storage account. Here’s why this is the best option, and why the other options are rejected:
A) Azure SQL Database
- Not Suitable: An Azure SQL Database is designed to store structured data in the form of tables, rows, and columns. It is primarily used for transactional data storage and is not suitable for file storage or sharing files between computers.
- Rejection Reason: SQL databases are not designed for file sharing or acting as network drives.
B) Virtual Machine Data Disk
- Not Suitable: While a virtual machine (VM) data disk can be used to store files in Azure, it is essentially a block-level storage solution. Mapping this as a network drive is impractical because it doesn’t natively support network shares or file sharing.
- Rejection Reason: A VM data disk requires additional configuration to make it accessible from multiple machines as a network drive, making it an inefficient solution for file sharing.
C) File Service in a Storage Account
- Suitable: Azure Files, offered through the File service in a storage account, is a fully managed file share in the cloud. It supports the SMB (Server Message ...
Author: Noah · Last updated Jun 25, 2026
SNAPSHOT -You plan to implement an Azure database solution.You need to implement a database solution that meets the following requirements:=E2=9C=91 Can add data concurrently from multiple regions=E2=9C=91 Can store JSON documentsWhich dat...
Author: Liam · Last updated Jun 25, 2026
Your company plans to start using Azure and will migrate all its network resources to Azure.You need to start the planning pr...
When planning to start using Azure and migrating network resources to Azure, the first thing you should create is A) a subscription. Here’s why this is the most suitable option, and why the other options are rejected:
A) A Subscription
- Selected Option: The subscription is the foundational container in Azure for organizing resources and managing billing. A subscription enables you to create and manage Azure resources, and it is necessary before you can create resource groups, virtual networks, or other resources. It also determines the billing and access control for your services.
- Reason for Selection: Without a subscription, you cannot access Azure services or create any other resources. It's the first step in the Azure environment and serves as the starting point for your planning and setup.
B) A Resource Group
- Not Suitable as First Step: A resource group is a container that holds related Azure resources like virtual machines, databases, and networks. You need to have a subscription in place first before you can create a resource group, as a resource group is always contained within a subscription.
- Rejection Reason: Although resource groups are crucial for organizing resources, they cannot exist without a subscription. Therefore, you must create a subscription first.
C) A Virtual Network
- Not Su...
Author: Olivia · Last updated Jun 25, 2026
SNAPSHOT -For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Ea...
Author: Ella · Last updated Jun 25, 2026
SNAPSHOT -To complete the sentence, select the appropriate option in the answer area.Hot Area:
Author: Zara · Last updated Jun 25, 2026
SNAPSHOT -You plan to deploy a critical line-of-business application to Azure.The application will run on an Azure virtual machine.You need to recommend a deployment solution for the application. The solution must provide a guaranteed availability of 99.99 percent.What is the minimum number of virtual machines and the minimum number of availability zones you ...
Author: Nia · Last updated Jun 25, 2026
Which Azure service should you use to collect events from multiple resources into a centralized repo...
The best Azure service to collect events from multiple resources into a centralized repository is C) Azure Monitor.
Explanation:
- Azure Monitor (C): Azure Monitor is designed specifically to collect, analyze, and act on telemetry data from multiple resources. It consolidates performance metrics, logs, and other event data into a centralized repository, providing insights into the health and operation of your applications and infrastructure. It includes tools like Log Analytics and Application Insights, which allow for querying and visualizing event data from across your Azure environment.
- Azure Event Hubs (A): Azure Event Hubs is a highly scalable data streaming platform designed to collect and process real-time events and telemetry data from various sources. While it can handle a high volume of events, it is not primarily a centralized repository for storing logs or metrics. It is often used for real-time data ingestion and event streaming, but it doesn't offer the comprehensive monitoring and analysis features that Azure Monitor does.
- Azure Analysis Services (B): Azure Analysis Services i...
Author: Noah · Last updated Jun 25, 2026
SNAPSHOT -To complete the sentence, select the appropriate option in the answer area.Hot Area:
Author: VenomousSerpent42 · Last updated Jun 25, 2026
SNAPSHOT -For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Ea...
Author: Alexander · Last updated Jun 25, 2026
SNAPSHOT -For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Ea...
Author: VenomousSerpent42 · Last updated Jun 25, 2026
SNAPSHOT -For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Ea...
Author: Lina Zhang · Last updated Jun 25, 2026
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You plan to deploy several Azure virtual machine...
Answer: B) No
Explanation:
Deploying Azure virtual machines (VMs) to scale sets alone does not ensure availability if a single data center fails. Here’s why:
Why Scale Sets are Not Enough:
- Azure Virtual Machine Scale Sets (VMSS) are designed to automatically scale the number of VMs up or down based on demand. While scale sets provide high availability by distributing VMs across multiple fault domains (physical racks) within a single data center, they do not inherently provide resiliency across multiple data centers.
- If a single data center fails, all VMs within that data center (even across multiple scale sets) will be affected. This means you would still lose the availability of your services, as VMSS alone does not replicate VMs across different geographical regions or data centers.
What is Needed for Resiliency Across Data Center Failures:
- To ensure availability if a single data center fails, you need to deploy VMs across multiple regions (geographically distributed data centers). You can use Azure Availability Zones, which are physically separa...
Author: MoonlitPantherX · Last updated Jun 25, 2026
You need to be notified when Microsoft plans to perform maintenance that can affect the resources deployed...
Answer: B) Azure Service Health
Explanation:
To be notified when Microsoft plans to perform maintenance that could affect the resources deployed to an Azure subscription, the appropriate service is Azure Service Health. Here's why:
Why Azure Service Health is the Correct Option:
- Azure Service Health provides personalized alerts and guidance for issues affecting your Azure services. It notifies you about planned maintenance, service issues, health advisories, and incidents that might affect your Azure resources and subscriptions.
- It allows you to receive notifications when Microsoft performs planned maintenance on services or data centers that could potentially impact your resources. You can configure these alerts to be sent to your preferred communication channels, such as email, SMS, or through an integration with other Azure services.
Why Other Options are Not Suitable:
A) Azure Monitor
- Not Suitable for Planned Maintenance Notifications: Azure Monitor is primarily focused on monitoring the performance and health of your resources. It tracks metrics, logs, and alerts for real-time diagnostics of your applications and infrastructure. However, it does not specifically notify you about planned maintenance events or service interruptions caused by Microsoft.
- Use Case: Azure Monitor is excellent for operational monitoring but does not handle notifications for ex...
Author: IronLion88 · Last updated Jun 25, 2026
DRAG DROP -Match the Azure Services service to the correct description.Instructions: To answer, drag the appropriate service from the column on the left to its description on the right. Each service may be used once, m...
Author: FlamePhoenix2025 · Last updated Jun 25, 2026
SNAPSHOT -For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Ea...
Author: MoonlitPantherX · Last updated Jun 25, 2026
SNAPSHOT -To complete the sentence, select the appropriate option in the answer area.Hot Area:
Author: NightmareDragon2025 · Last updated Jun 25, 2026
SNAPSHOT -For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Ea...
Author: Leah Davis · Last updated Jun 25, 2026
SNAPSHOT -Select the answer that correctly completes the sentence.
Author: RadiantJaguar56 · Last updated Jun 25, 2026
SNAPSHOT -For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Ea...
Author: Sam · Last updated Jun 25, 2026
You plan to deploy several Azure virtual machines.You need to ensure that the services running on the virtual machines remain available if a single data center fails.What ar...
To ensure that services running on Azure virtual machines remain available in case a single data center fails, we need to focus on strategies that distribute the virtual machines across physically isolated locations.
Let's analyze each option:
A) Deploy the virtual machines to two or more availability zones.
- Why selected: Availability zones are distinct physical locations within an Azure region, each having its own power, cooling, and networking infrastructure. By deploying virtual machines to multiple availability zones, you ensure that if one zone experiences a failure, the other zones continue to function, providing high availability.
- Scenario: This solution is ideal for customers needing high availability within a single region.
- Why not others: This option directly addresses the requirement of ensuring services remain available in case of a data center failure, which typically corresponds to an availability zone failure.
B) Deploy the virtual machines to two or more resource groups.
- Why rejected: Resource groups are logical containers for Azure resources and do not provide physical isolation. Deploying VMs across different resource groups does not guarantee availability during a data center failure.
- Scenario: Useful fo...
Author: Kai99 · Last updated Jun 25, 2026
SNAPSHOT -To complete the sentence, select the appropriate option in the answer area.Hot Area:
Author: RadiantPhoenixX · Last updated Jun 25, 2026
DRAG DROP -Match the Azure service to the appropriate description.To answer, drag the appropriate service from the column on the left to its description on the right. Each service may be used once, more...
Author: Ravi Patel · Last updated Jun 25, 2026
SNAPSHOT -For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Ea...
Author: Lina Zhang · Last updated Jun 25, 2026
What is the most severe failure from which an Azure Availability Zone can be used to protect access ...
Azure Availability Zones are designed to provide high availability and fault tolerance against physical and infrastructure failures within a region. To understand the most severe failure that Availability Zones can protect against, let's break down each option:
A) A physical server failure
- Why rejected: A physical server failure affects only individual virtual machines or instances. Azure Availability Zones are designed to protect against more significant failures, such as entire data centers, not individual hardware issues.
- Scenario: This is a lower-severity issue compared to failures that affect an entire data center or region. Azure typically handles server failures internally, so availability zones don't directly protect against this.
B) An Azure region failure
- Why rejected: Availability Zones are designed to provide protection within a region, but they cannot protect against a complete region failure. If an entire Azure region goes down, Availability Zones will not help, as all the zones are still within the same region. For regional protection, services should be deployed across multiple regions.
- Scenario: This would require multi-region deployment (not multi-zone) for protection.
C) A storage failu...
Author: ShadowWolf101 · Last updated Jun 25, 2026
You need to purchase a third-party virtual security appliance that you will deploy to an Azure subsc...
When looking to deploy a third-party virtual security appliance to an Azure subscription, the best option to use would be C) Azure Marketplace. Here’s an explanation of why this option is selected, and why the others are not suitable.
Key Factors for Selecting Azure Marketplace:
- Third-party Solutions: Azure Marketplace offers a wide range of third-party virtual security appliances and services that are pre-configured for Azure environments. These appliances can be easily deployed into your Azure subscription, typically with templates and streamlined installation procedures.
- Security Appliances: It includes a variety of virtual security appliances such as firewalls, intrusion detection systems, and antivirus solutions, which are often from well-known third-party vendors like Fortinet, Palo Alto Networks, etc.
- Integration: The solutions found in Azure Marketplace are specifically designed to integrate well with Azure resources, making them easier to manage and scale.
Why the other options are rejected:
A) Azure Subscriptions:
- Role: Azure subscriptions are the foundational units for managing resources within the Azure platform. They are not a marketplace for third-party tools, and therefore would not directly provide or facilitate the purchase and deployment of virtual security appliances.
B) A...
Author: Sofia · Last updated Jun 25, 2026
DRAG DROP -Match the serverless solution to the correct characteristic.To answer, drag the appropriate serverless solution from the column on the left to its characteristic on the right. Each serverless solution may be used ...
Author: VenomousSerpent42 · Last updated Jun 25, 2026
DRAG DROP -Match the Azure governance feature to the correct description.Instructions: To answer, drag the appropriate feature from the column on the left to its description on the right. Each feature may be used once...
Author: Sara · Last updated Jun 25, 2026
DRAG DROP -Match the Azure services to the correct descriptions.Instructions: To answer, drag the appropriate Azure service from the column on the left to its description on the right. Each service may be used once...
Author: Isabella · Last updated Jun 25, 2026
SNAPSHOT -To answer, select the appropriate option in the answer area.Hot Area:
Author: ThunderBear · Last updated Jun 25, 2026
You need to purchase a third-party virtual security appliance that you will deploy to an Azure subsc...
When purchasing a third-party virtual security appliance to deploy to an Azure subscription, the best option is C) Azure Marketplace. Here’s an explanation of why this option is selected, and why the others are not suitable:
Key Factors for Selecting Azure Marketplace:
- Third-party Solutions: Azure Marketplace is specifically designed to provide a wide range of third-party services and solutions that can be directly deployed into Azure. It includes security appliances, such as firewalls, intrusion detection systems, and other security tools from various vendors, optimized for the Azure environment.
- Ease of Deployment: Azure Marketplace typically offers one-click deployment options and pre-configured templates, making it easy to deploy and configure third-party security appliances into your Azure subscription.
- Variety of Vendors: Azure Marketplace features offerings from a variety of well-known security vendors like Fortinet, Palo Alto Networks, and Check Point, which are trusted in the enterprise space.
Why the other options are rejected:
A) Azure Subscriptions:
- Role: Azure subscriptions are the basic building blocks for managing resources within Azure. While essential for organizing and managing your Azure environment, subscriptions themselves do not provide a marketplace for third-party tools or security appliances. You would still need to purchase or deploy those resources from a specific marketplace or platform.
B) Microsoft Defender...
Author: IceDragon2023 · Last updated Jun 25, 2026
SNAPSHOT -Select the answer that correctly completes the sentence.Hot Area:
Author: Akash · Last updated Jun 25, 2026
You plan to deploy a service to Azure virtual machines.You need to ensure that the service will be available if a datacenter fails.What...
When planning to deploy a service to Azure virtual machines and ensuring its availability in the event of a datacenter failure, the best option to use is D) Availability Zones. Here’s an explanation of why this option is selected and why the other options are not suitable:
Key Factors for Selecting Availability Zones:
- Redundancy Across Multiple Datacenters: Availability Zones are physically separated datacenters within an Azure region, each with its own independent power, cooling, and networking. By deploying virtual machines across multiple Availability Zones, you can ensure that if one datacenter experiences an outage, the service remains available from the other zones.
- High Availability: Availability Zones provide a high level of fault tolerance, which is critical when you need to ensure that your service stays online during a datacenter failure.
- Azure SLA: Azure guarantees 99.99% uptime for virtual machines deployed across Availability Zones, which makes them the best option for high availability in the event of a datacenter failure.
Why the other options are rejected:
A) Availability Sets:
- Role: Availability Sets provide redundancy by distributing virtual machines across multiple physical servers, racks, and other hardware within a single datacenter. However, if the entire datacenter goes down, all VMs in the set could be affected. While Availability Sets do provide some fault tolerance within a datacenter, they do not protect against a complete datacenter failure. Hence, they are less suitable for ensuring availability during a datacenter failure compared to Availability Zones.
B) Proximity Placeme...
Author: Ishaan · Last updated Jun 25, 2026
Your company has an Azure subscription that contains resources in several regions.You need to ensure that administrators can onl...
To ensure that administrators can only create resources in specified regions within an Azure subscription, the best option is B) an Azure Policy. Here’s an explanation of why this option is selected and why the other options are not suitable:
Key Factors for Selecting Azure Policy:
- Control Over Resource Creation: Azure Policy allows you to define and enforce policies that govern resource deployment and management. Specifically, you can create a policy that restricts resource creation to only a set of approved regions. This ensures that administrators are unable to create resources in any region that is not allowed.
- Granular Control: Azure Policies provide a way to set rules for resources at the subscription or resource group level. This enables centralized governance, making it easier to enforce region-specific deployment restrictions across multiple subscriptions or resources.
- Compliance: Azure Policy is commonly used to ensure compliance with organizational or regulatory standards, and restricting resource deployment to specific regions is a common scenario for policy enforcement.
Why the other options are rejected:
A) Read-Only Lock:
- Role: A read-only lock only restricts users from modifying or deleting resources but does not prevent them from creating new resources. A read-only lock will not limit administrators from deploying resources in any region, making it an unsuitable option for this scenario.
- Purpose: It is useful for protecting resources from being altered or deleted, but it does not address region-based restrictions for resource creation.
C) Management Groups:
- Role: Management Groups in Azure are used to manage and organize Azure subscriptions in a hierarchic...
