Question 240 An enterprise deploys its own web, application and database servers on separate Azure VMs. Which service model dominates this implementation? IaaS Pure PaaS managed database and app runtime SaaS for a completed multi-tenant business application Pure SaaS Explanation Correct Answer A:Tenant-managed VMs and guest software supply the application tiers. Incorrect Answers B:The given implementation uses self-managed VM tiers, not platform-hosted components. C:SaaS is a finished vendor application; the business is operating its own three-tier VM-hosted workloads. D:No finished vendor app replaces the tenant's server architecture.
Question 241 Developers want access to custom application logs but not responsibility for host kernel updates. Which service boundary is coherent? SaaS: customers freely install arbitrary server kernel modules IaaS: the provider always patches every guest OS No cloud model permits application logging PaaS: customer app diagnostics, provider host management Explanation Correct Answer D:Managed app runtimes can expose application telemetry without tenant host administration. Incorrect Answers A:SaaS hosts remain vendor-controlled. B:IaaS usually assigns guest maintenance to tenants. C:Logging is common across models with different access levels.
Question 242 An IT team needs to administer a full Windows guest desktop session on a server for troubleshooting. Which cloud abstraction most directly gives the guest? An Azure storage blob container A managed function execution plan An IaaS Windows VM SaaS hosted document editing Explanation Correct Answer C:The tenant can administer the guest OS with supported remote access. Incorrect Answers A:Object storage cannot host an interactive desktop OS. B:Functions do not offer persistent arbitrary OS desktop sessions. D:A finished app does not expose the vendor's Windows server guest.
Question 243 A SaaS administrator can enable MFA for tenant users but cannot change the SaaS backend hypervisor. What does this show? The customer owns the vendor physical servers MFA always removes the need for data permissions Tenant identity configuration remains while provider infrastructure is abstracted SaaS tenants automatically receive host root privileges Explanation Correct Answer C:SaaS exposes security settings without giving host administration. Incorrect Answers A:Identity settings do not transfer hardware ownership. B:Authentication does not replace authorization. D:The provider controls its server stack.
Question 244 A developer runs custom code on PaaS and accidentally commits credentials to source control. Who must correct the credential practice? The provider's hypervisor patch team alone Every other tenant on the shared platform The datacenter cooling contractor The application's developer and security team Explanation Correct Answer D:Managed hosting does not make hard-coded customer secrets safe. Incorrect Answers A:Host maintenance does not remove credentials from tenant code. B:Other customers cannot govern this application's code. C:Facility services have no role in app secret handling.
Question 245 A database administrator attaches additional managed disks to a self-managed Azure VM. What service characteristic is this? A document collaboration subscription PaaS code-only deployment with no guest control IaaS exposes storage primitives to a tenant-managed guest SaaS completed database application with no guest access Explanation Correct Answer C:The customer chooses and configures the VM's disks and filesystems. Incorrect Answers A:End-user productivity service access is not disk management. B:Managed runtimes don't ordinarily expose raw VM disk administration. D:SaaS abstracts disk attachment.
Question 246 A managed database service handles engine maintenance. Which action should the tenant still perform? Decide facility power redundancy for every host Replace provider disk drives when they fail Patch the provider's database host operating system manually Configure appropriate database users and data access policies Explanation Correct Answer D:Hosting automation does not decide the organization's required row and table permissions. Incorrect Answers A:Physical power design belongs to the provider. B:Hardware is managed by Azure. C:This maintenance is part of the managed service.
Question 247 A business relies on a SaaS platform for records and assumes it never needs to consider data retention or recovery. Which response is best? Review SaaS retention, recovery and export capabilities against business needs Disable account audits because hosted apps are fully managed Buy additional IaaS VM CPU as a SaaS backup Assume all deleted records can be restored forever Explanation Correct Answer A:Provider operation of the app does not guarantee every tenant-specific recovery requirement. Incorrect Answers B:Tenant governance still matters. C:VM capacity is not a tenant record recovery strategy. D:Retention and restore limits vary by product and configuration.
Question 248 A managed hosting plan restricts the runtime language version available to a custom application. Which tradeoff is illustrated? Specify an unsupported language runtime and expect a PaaS provider to install it at the host OS level SaaS guarantees users can select arbitrary vendor source versions IaaS cannot run any supported guest operating system PaaS reduces infrastructure management but constrains supported runtime choices Explanation Correct Answer D:Managed runtimes expose defined versions and capabilities. Incorrect Answers A:Platform hosting supports defined runtimes and options; it does not grant arbitrary host operating-system control. B:Finished applications usually control release schedules. C:VMs offer broader guest customization.
Question 249 An Azure IaaS VM has a failing customer-installed antivirus agent. Which team should investigate the guest software first? An unrelated SaaS help desk The provider's physical building guard Every Azure region operator as a separate tenant administrator The customer's VM operations team Explanation Correct Answer D:Tenant-installed software and configuration are managed by the tenant. Incorrect Answers A:An external app provider does not maintain this VM's installed agent. B:Guest process problems are outside facility security. C:The customer manages its guest software, not the region's physical staff.
Question 250 A solution uses Azure VMs for a legacy engine, managed databases for new APIs and SaaS for employee collaboration. How should its cloud service model be described? A mix of IaaS, PaaS and SaaS components Pure SaaS because users have collaboration apps Pure IaaS because any VM exists A rule that service models cannot coexist Explanation Correct Answer A:One organization can combine different service abstractions for different workloads. Incorrect Answers B:The architecture still includes tenant-managed infrastructure. C:Other managed services remain PaaS and SaaS. D:Cloud deployments can combine models.
