Question 170 A task has one strictly sequential calculation that cannot be divided. Why might simply adding many worker instances not improve completion time? Cloud scalability always guarantees linear speedup for every algorithm VM image tags automatically distribute sequential operations The task's dependency structure limits parallel execution Increase VM size without changing a strictly serial algorithm Explanation Correct Answer C:Horizontal scale requires independently processable work. Incorrect Answers A:Sequential bottlenecks limit parallel benefits. B:Image metadata cannot split a serialized computation. D:More resources may not accelerate a workload that cannot use parallel execution.
Question 171 An enterprise uses network filtering, identity checks and application authorization for a sensitive portal. What security design principle does this represent? A requirement to place all controls on one VM process Defense in depth across independent control layers A guarantee that multi-layer controls eliminate every vulnerability A policy of relying only on one perimeter firewall Explanation Correct Answer B:Overlapping safeguards reduce dependence on one single security barrier. Incorrect Answers A:Independent layers reduce correlated failure of safeguards. C:Defense in depth mitigates risk but is not infallible. D:One layer can fail or be bypassed.
Question 172 A cloud application needs to access another service without embedding a long-lived shared password in its code. What security benefit should it pursue? Share one permanent root account across all applications Store plaintext administrator keys in a public repository Identity-based access with managed credentials and least-privilege roles Disable authentication because both services run in Azure Explanation Correct Answer C:Reducing hard-coded secrets limits credential exposure and improves revocation controls. Incorrect Answers A:Broad shared privilege prevents meaningful isolation. B:Published secrets expose powerful credentials. D:Cloud location does not remove authorization requirements.
Question 173 A help-desk engineer only needs to restart VMs in one resource group. Which governance approach limits excess access? Remove all resource monitoring so misuse is not noticed Grant Owner across the entire tenant Assign the narrowest appropriate role at the required scope Share a global administrator account with the engineer Explanation Correct Answer C:Least privilege minimizes accidental or malicious operations outside the job. Incorrect Answers A:Visibility loss is not access governance. B:Broad privileges exceed the requested operational duties. D:Shared identities obscure accountability and widen access.
Question 174 Two cloud environments were created manually and now differ in security settings. What operating practice reduces recurrence? Deploy with only screenshots of prior portal screens Keep undocumented emergency changes indefinitely Use identical display names but independent unknown settings Manage configurations through tested, version-controlled deployment definitions Explanation Correct Answer D:Repeatable code and review can reveal and reduce infrastructure drift. Incorrect Answers A:Screenshots are not a versioned executable configuration. B:Unrecorded changes make environments diverge further. C:Names do not establish configuration parity.
Question 175 A team wants infrastructure changes reviewed before deployment, like application code changes. What practice supports that? Use a finance spreadsheet instead of configuration artifacts Version-controlled infrastructure definitions with pull-request review Keep infrastructure changes only as unsaved portal clicks Grant every user permanent unrestricted production access Explanation Correct Answer B:Changes can be compared and approved before a deployment modifies resources. Incorrect Answers A:A cost sheet cannot encode full infrastructure state. C:Unreviewed manual activity lacks a repeatable history. D:Broad access undermines change control.
Question 176 An operations team receives an outage report but has no metrics, application logs or health events. What cloud manageability gap does this expose? Too many administrative resource tags An inability to buy a larger monitor A rule requiring only a single Azure region Insufficient centralized monitoring and diagnostic collection Explanation Correct Answer D:Operational data is needed to identify failures and understand dependencies. Incorrect Answers A:Tags do not replace telemetry, but are not the fundamental missing diagnostic data. B:Screen dimensions are unrelated to missing resource logs. C:Regional design does not itself generate diagnostic evidence.
Question 177 A company wants to deploy, inspect and remove related test resources as a logical unit. Which management concept helps? Group resources by lifecycle and ownership boundaries Rely only on per-VM guest operating-system names as a subscription resource inventory Treat every VM guest file as a separate management group Place every resource in an unrelated subscription without organization Explanation Correct Answer A:Logical grouping simplifies associated deployment and cleanup operations. Incorrect Answers B:Guest names do not centrally group or organize all Azure resources for lifecycle management. C:Guest files are not Azure governance group scopes. D:Fragmentation complicates lifecycle management.
Question 178 A cloud service is deployed with publicly reachable management ports for convenience. What foundational cloud security practice should change? Assume hosted resources cannot be attacked from the internet Use restrictive defaults and explicitly authorize necessary access Disable identity checks for management connections Open more ports in case future applications need them Explanation Correct Answer B:Minimal exposure reduces opportunities for unsolicited management traffic. Incorrect Answers A:Public endpoints still require protection. C:Removing authentication worsens access risk. D:Unnecessary exposure increases attack surface.
Question 179 A critical application requires predictable compute availability during a regional demand surge. What should its planners verify? Capacity and relevant availability guarantees for the chosen deployment design A belief that all cloud VM types are unlimited in any region Only the local administrator's laptop specifications Whether every VM uses a unique tag string Explanation Correct Answer A:Normal elasticity is subject to quotas and supply, so guaranteed capacity may need specific arrangements. Incorrect Answers B:Capacity is not boundless. C:Customer laptop hardware does not reserve provider capacity. D:Metadata labels cannot assure physical compute supply.
Question 180 A team makes every production deployment through a template pipeline and keeps change logs. What benefit results? Elimination of the need to authorize deployment identities Repeatable, auditable infrastructure changes Guaranteed zero deployment failures Automatic proof that all application code contains no defects Explanation Correct Answer B:Automation and version history make intended configuration easier to review and reproduce. Incorrect Answers A:Pipelines must still use appropriate permissions. C:Automation reduces variation but can still deploy incorrect definitions. D:Infrastructure automation does not validate every application behavior.
