Question 840 A portal user sees an Azure VM marked unavailable and needs platform-specific resource health information. What portal capability is relevant? Only the Cost Management forecast Only a resource group's name Resource Health information for the affected resource Only Microsoft Purview sensitivity labels Explanation Correct Answer C:Resource Health can report platform availability details for supported resources. Incorrect Answers A:Spending estimates aren't availability evidence. B:Names aren't platform health signals. D:Data classification doesn't show VM outages.
Question 841 A support engineer is on a managed workstation without Azure CLI installed but wants an interactive cloud management terminal in the browser. Which portal-integrated feature helps? Remote into an Azure VM merely to open a local terminal for management Azure Storage Explorer as the required terminal A resource lock Azure Cloud Shell Explanation Correct Answer D:Cloud Shell provides a browser-accessible Azure management shell. Incorrect Answers A:Cloud Shell offers a browser-based management shell without requiring a separately administered VM. B:Storage Explorer is graphical and not a general Azure CLI shell. C:Locks don't run commands.
Question 842 An administrator wants to inspect subscription placement under a corporate management group. Which Azure portal concept is relevant? A VM availability set's fault domains Management groups and subscription hierarchy Organize the enterprise using only resource groups inside one subscription Azure Files folder tree Explanation Correct Answer B:The hierarchy organizes subscription-level governance scope. Incorrect Answers A:Compute placement doesn't show management hierarchy. C:Resource groups cannot provide the management-group hierarchy across multiple subscriptions. D:File directories aren't subscription governance.
Question 843 A web app operator wants a central view of Azure Monitor alerts affecting a resource. Which portal experience is relevant? Look only at each VM's guest event viewer instead of Azure alert rules An Azure Data Box job Azure Monitor alerts filtered to the application or scope Azure Pricing Calculator alone Explanation Correct Answer C:Monitor alert rules and fired alerts show observed operational conditions. Incorrect Answers A:Guest logs do not replace the Azure portal's cross-resource alert and notification inventory. B:Physical migration isn't app runtime monitoring. D:A quote doesn't display runtime alerts.
Question 844 A resource owner needs to add Department=HR metadata to a new VM for reporting. Where can they make that change in Azure? Set the label only in the VM guest's local configuration file Resource tags in the portal or equivalent management tooling Set a guest OS environment variable Department=HR on the virtual machine An availability-set fault domain selector Explanation Correct Answer B:Tags attach key-value classification metadata to ARM resources. Incorrect Answers A:Guest files are not the ARM tag metadata used for cloud resource inventory and cost reporting. C:Guest environment variables are not Azure Resource Manager resource tags used by inventory and reporting. D:Placement settings aren't business metadata.
Question 845 An engineer uses the portal search and sees a resource name in an organizational document but not in their resource list. Why might that happen? VM availability zones always restrict portal search by location The operator may lack resource-scope read permissions or be in the wrong tenant/subscription The resource's storage tier changes portal authentication Azure automatically hides all resources with long names Explanation Correct Answer B:Inventory visibility requires applicable scope and rights. Incorrect Answers A:Zone placement isn't the primary search permission boundary. C:Storage access tier isn't sign-in authorization. D:Length alone isn't a universal visibility rule.
Question 846 An owner wants to assign Reader rights to an auditor for one resource group. What portal blade is relevant? Azure Storage lifecycle management Grant an operating-system local administrator role instead of an Azure management role Access control (IAM) at that resource group VM guest Windows Users folder only Explanation Correct Answer C:IAM manages Azure RBAC assignments at the intended scope. Incorrect Answers A:Blob aging rules aren't role assignments. B:OS permissions do not confer Azure subscription or resource-group RBAC authorization. D:Guest users are separate from Azure RBAC.
Question 847 An engineer uses Azure Cloud Shell to inspect subscriptions from a browser. Which shells does the service support? Use the Azure portal's visual resource view instead of its integrated terminal Bash and PowerShell environments Only the Windows graphical desktop shell Only SQL Server Management Studio Explanation Correct Answer B:Cloud Shell provides supported shell environments for Azure management. Incorrect Answers A:The resource interface is not an interactive Azure CLI or PowerShell shell session. C:Cloud Shell is a terminal service. D:Cloud Shell isn't limited to a database GUI.
Question 848 A laptop is locked down and cannot install Azure CLI, but the operator needs to run an az command urgently. What is a useful alternative? Create an availability set for the laptop Use Azure Cloud Shell's preinstalled Azure CLI environment Upload the command into Blob Archive and assume it runs Rename the subscription to 'az' Explanation Correct Answer B:The browser terminal can execute az commands without local installation. Incorrect Answers A:Azure VM placement doesn't install local tools. C:Storage doesn't execute CLI scripts. D:Names don't install a CLI.
Question 849 An operator runs a command in Cloud Shell and accidentally targets the wrong Azure subscription. What should they inspect? Run az group list without first confirming the active subscription context Change only the Azure portal's currently selected subscription before a separate CLI session The current account and subscription context before running write commands Assume the Azure Cloud Shell instance always targets the portal’s most recently viewed subscription Explanation Correct Answer C:Cloud Shell commands act under the selected authenticated scope. Incorrect Answers A:A list command can still return resources from the wrong active subscription; verify the context before changes. B:The CLI account context must be checked directly because portal navigation does not always set it. D:Shell command context is independently selected; portal navigation alone does not guarantee the CLI target.
Question 850 An engineer can run Azure CLI commands in Cloud Shell but receives authorization errors when attempting to create a VM. What principle applies? All Cloud Shell sessions run as subscription Owner Cloud Shell does not bypass the signed-in principal's Azure RBAC and policy restrictions An Azure resource tag named Admin grants VM creation Switching to Bash always overrides denial Explanation Correct Answer B:Terminal availability is not a privilege grant. Incorrect Answers A:Shell access doesn't automatically elevate roles. C:Tags aren't role assignments. D:Shell choice doesn't bypass authorization.
