Question 340 A new employee thinks Azure management groups store the organization's user passwords. What correction is relevant? Availability zones assign all users global administration Management groups replace the need for users and roles Azure regions store employee passwords by default Management groups organize subscription governance; Microsoft Entra ID manages cloud identities Explanation Correct Answer D:Governance hierarchy and identity directory have different roles. Incorrect Answers A:Zones do not manage identity privileges. B:Administrative scopes still require authorized identities. C:Regions are geographic infrastructure scopes.
Question 341 An architect wants a multi-level enterprise structure for central policy, not just labels on individual resources. What should it use? A VM availability set as the enterprise parent Tags alone as a full substitute for every inherited policy Use only a common resource tag value as the central policy parent Management groups above subscriptions with policies and RBAC Explanation Correct Answer D:This provides hierarchical enforcement beyond metadata tagging. Incorrect Answers A:Availability sets group VM placement, not subscriptions. B:Tags categorize but do not themselves implement a complete governance hierarchy. C:Tags label resources; management groups provide hierarchy and policy inheritance across subscriptions.
Question 342 A vendor application requires a Windows kernel driver and administrator access inside its guest operating system. Which Azure compute option preserves that control? Azure Functions Consumption Azure Container Instances Azure virtual machine Azure App Service web app Explanation Correct Answer C:A VM permits guest OS administration and supported driver installation. Incorrect Answers A:The function host does not expose a tenant-administered guest kernel. B:A container image does not grant control of its Azure host kernel. D:App Service abstracts guest OS maintenance and custom kernel drivers.
Question 343 An accounting tool only ships as an installer that requires interactive server configuration and a scheduled Windows service. Which hosting choice needs the fewest application changes? A Windows Azure virtual machine Azure Blob Storage Azure Static Web Apps Azure Functions Explanation Correct Answer A:An IaaS VM can run the existing installer and service under a managed guest OS. Incorrect Answers B:Blob storage holds objects, not a Windows service process. C:Static hosting has no continuously administered Windows server. D:Event-driven functions cannot directly host an always-running legacy Windows service.
Question 344 An IT team moves Windows Server application VMs to Azure but assumes Microsoft now installs every guest OS security update. What should the team recognize? The Azure region determines Windows update approvals VM Scale Sets eliminate all guest patch responsibility Azure Policy automatically installs every update without configuration The customer still manages guest operating system patching for its VMs Explanation Correct Answer D:IaaS transfers physical host duties but leaves guest OS configuration with the customer. Incorrect Answers A:Geography does not replace a VM update workflow. B:Scaling orchestration does not remove image and guest maintenance duties. C:Policy can assess or enforce supported settings but is not an unconditional patch service.
Question 345 A VM holds critical transaction records on the temporary local disk, and the team needs them after redeployment. Which storage change is appropriate? Use only the VM's local cache partition Persist records on an attached managed data disk or suitable durable service Increase only the VM temporary disk size Move records into the VM's paging file Explanation Correct Answer B:Managed disks persist independently of temporary VM storage. Incorrect Answers A:A cache is not the durable data layer required for critical records. C:More ephemeral capacity does not make the storage persistent. D:Paging storage is not a durable application data store.
Question 346 A batch application is CPU-bound and has abundant memory. Which Azure VM planning factor deserves attention first? Set the VM's region pair to a larger size Increase disk redundancy without checking CPU Change only the subscription display name Select a VM size with appropriate vCPU capacity for measured load Explanation Correct Answer D:Compute family and vCPU performance address sustained CPU constraints. Incorrect Answers A:Region pairing is not a VM sizing knob. B:Disk replicas do not relieve a compute bottleneck. C:Subscription labels do not increase CPU throughput.
Question 347 An analytics service repeatedly runs out of memory while CPU utilization is low. What VM-size adjustment most directly addresses the symptom? Switch the disk from LRS to ZRS as the only change Evaluate a memory-optimized VM size with adequate RAM Add only a public IP address Pick a smaller burstable VM solely for lower base price Explanation Correct Answer B:Memory capacity is the limiting dimension in the described service. Incorrect Answers A:Disk redundancy cannot prevent in-memory allocation failures. C:Network addressing does not increase guest memory. D:A smaller memory allocation can increase failures.
Question 348 An Azure VM runs a database whose storage IO latency is the bottleneck. Which configuration detail should the engineer assess? The resource group name length Increase only VM CPU without reviewing the managed disk throughput cap The managed disk tier and VM-supported disk performance limits The VM's subscription billing email Explanation Correct Answer C:Both disk characteristics and VM caps affect achievable IOPS and throughput. Incorrect Answers A:Resource metadata does not set data disk performance. B:The bottleneck is storage latency, and disk performance constraints can persist after a CPU increase. D:A billing contact does not remove a storage performance limit.
Question 349 A team repeatedly creates identical Windows servers with an approved runtime and security settings. What Azure VM provisioning approach reduces drift? Deploy all VMs from unrelated public images each time Store only a screenshot of settings Let every operator manually install random software versions Use a maintained image or image-based automated deployment Explanation Correct Answer D:Consistent images reproduce the approved server baseline across launches. Incorrect Answers A:Independent arbitrary images defeat the common baseline. B:A screenshot cannot deploy a consistent guest operating system. C:Uncontrolled steps create inconsistent guest configurations.
Question 350 A developer restarts a guest operating system inside an Azure VM. Which statement about the restart is accurate? It restarts every VM connected to the virtual network It restarts that VM's guest environment, not every resource in its resource group It automatically restarts all Azure regions in the subscription It restarts all VMs with the same tag Explanation Correct Answer B:Resource groups organize resources but do not synchronize guest restarts. Incorrect Answers A:A VNet does not impose shared guest lifecycle. C:A guest reboot has no subscription-wide region effect. D:Tags do not create a reboot broadcast.
