Question 830 A compliance team wants to block unapproved resource configurations and accidental deletion. Which combination addresses both requirements? Only Azure Cost Management budgets Treat an Azure Policy audit assignment as exactly equivalent to a CanNotDelete lock Only a tag named Protected Azure Policy for configuration rules and resource locks for management deletion protection Explanation Correct Answer D:Policy and locks have complementary governance functions. Incorrect Answers A:Budgets notify on spend but don't enforce those two controls. B:Policy evaluation and deletion protection are different controls with different triggers and effects. C:Metadata isn't enforceable configuration or delete protection.
Question 831 An administrator wants to move a locked resource to a different resource group. What operational prerequisite should be checked? Whether existing locks prevent the required management move and whether an approved lock change is necessary Only the Blob access tier of an unrelated storage account Move only the protected resource's tag values and assume the lock automatically follows Assume a move always bypasses locks and access control Explanation Correct Answer A:Resource moves use management actions that can be restricted by locks. Incorrect Answers B:Storage temperature isn't a move permission. C:Moving resources can have distinct support and protection rules; tag metadata does not guarantee safe lock behavior. D:ARM governance remains relevant to moves.
Question 832 A new cloud operator wants to view subscriptions, create a VM and inspect its settings without writing commands. Which management interface is designed for this? Azure Files share Open the VM guest operating system settings as the main subscription administration console Azure portal Azure Data Box Explanation Correct Answer C:The browser-based portal provides graphical resource creation and management. Incorrect Answers A:A file share doesn't manage cloud resources. B:Guest settings cannot centrally create and govern Azure subscriptions and cloud resources. D:An offline transfer device isn't a browser admin console.
Question 833 An operator cannot find a VM in the Azure portal despite knowing its name. Which scope should they check? Only the VNet subnet mask Search for the VM name only inside the wrong subscription scope Only the storage account blob tier The selected directory, subscription and resource filters Explanation Correct Answer D:Portal visibility depends on both the active scope and authorized access. Incorrect Answers A:Private IP sizing doesn't locate the resource in portal navigation. B:Portal search and inventory filters must include the subscription and directory containing the target resource. C:Object temperature isn't the portal subscription filter.
Question 834 A project owner wants to view all resources deployed into one Azure resource group. What portal navigation is relevant? Check only the VM's public IP Inspect the local VM OS file explorer Open the intended resource group and inspect its Resources list Use the VM's operating-system file explorer instead of the Azure resource-group view Explanation Correct Answer C:The resource group provides a logical inventory of related ARM resources. Incorrect Answers A:An address doesn't list associated resource types comprehensively. B:Guest files aren't the ARM inventory. D:A guest file explorer cannot enumerate the ARM resources grouped under the Azure resource group.
Question 835 A manager sees a VM's monitoring chart in the portal but asks for its billed monthly charges. Which portal area should they visit? The VM's OS boot console only Inspect only the VM guest's CPU performance counter Cost Management at the relevant scope The resource group's icon selector Explanation Correct Answer C:Billing analysis and runtime performance are different portal experiences. Incorrect Answers A:Guest console doesn't contain the complete Azure usage invoice. B:CPU usage does not present subscription cost reports and billing breakdowns in the Azure portal. D:UI icons don't show metered charges.
Question 836 An employee signs in to the Azure portal but cannot modify the production resource group. Which concept explains this? Assign a guest OS account administrative rights without Azure RBAC Every VM has identical management permissions by default Azure management permissions are governed by RBAC and policy at the relevant scope Any portal user is automatically subscription Owner Explanation Correct Answer C:Portal sign-in doesn't automatically grant rights to every resource. Incorrect Answers A:Guest login permissions do not grant Azure Resource Manager rights to change the production resource group. B:Roles vary by principal and scope. D:Authentication isn't universal authorization.
Question 837 An administrator wants to know who recently modified a VM resource's Azure configuration. Which portal evidence should be inspected? Only the VM's clock settings Review only a resource's current configuration without checking its Azure activity log Only browser history on the administrator's laptop Azure Activity Log for the resource or appropriate scope Explanation Correct Answer D:Activity Log tracks relevant management-plane events and initiators. Incorrect Answers A:System time doesn't identify ARM callers. B:Current state may not identify who performed the control-plane change or when it occurred. C:Browser navigation isn't the cloud operation log.
Question 838 A novice admin sees a critical resource's Delete button and wants to prevent accidental removal by operators. Which Azure feature can be configured in the portal? Changing the portal tab color Publishing a longer resource name An appropriate resource lock Increasing VM CPU cores Explanation Correct Answer C:Locks can restrict ARM deletes even when an operator has management permissions. Incorrect Answers A:UI styling doesn't enforce deletion protection. B:Names don't block deletes. D:Capacity doesn't change delete authorization.
Question 839 An organization is unfamiliar with Azure and wants to use guided resource-creation forms with validation before launching services. Which interface fits? Configure a VM's startup script instead of using the portal's guided deployment VM guest BIOS configuration alone Azure portal resource deployment blades An Azure Data Box shipping label Explanation Correct Answer C:Portal forms guide initial configuration and ARM deployment. Incorrect Answers A:An OS startup script runs after VM provisioning and is not a substitute for creating the Azure resource. B:Guest settings don't create an Azure resource. D:Shipping doesn't deploy web services.
Question 840 A portal user sees an Azure VM marked unavailable and needs platform-specific resource health information. What portal capability is relevant? Only the Cost Management forecast Only a resource group's name Resource Health information for the affected resource Only Microsoft Purview sensitivity labels Explanation Correct Answer C:Resource Health can report platform availability details for supported resources. Incorrect Answers A:Spending estimates aren't availability evidence. B:Names aren't platform health signals. D:Data classification doesn't show VM outages.
